Pilot Audit Log

Comprehensive audit trail of all Pilot Protocol activity for security and compliance. Use this skill when: 1. You need detailed logs of all trust decisions a...

This skill appears to be an audit logger for Pilot Protocol and is generally coherent, but do the following before installing or running it: - Confirm what value should populate $AGENT (the SKILL.md uses $AGENT but no env var is declared); add a declared env var or replace with explicit agent IDs. - Review and sanitize inputs that go into the log (escape JSON and shell metacharacters) to avoid malformed logs or injection via agent names/results. - Ensure the audit directory (~/.pilot/audit) has correct permissions and a retention/back-up plan—logs may contain sensitive info. - Verify pilotctl's behavior for the handshake commands used here (they may perform network or trust changes) and ensure you trust the pilotctl binary and daemon being used. - Consider adding explicit instructions for log rotation, redaction of secrets, and validation of inputs in the SKILL.md. If you want me to, I can produce a safer, corrected SKILL.md snippet that declares expected env vars, escapes JSON properly, and documents permissions/retention recommendations.

Type: OpenClaw Skill Name: pilot-audit-log Version: 1.0.0 The pilot-audit-log skill provides standard audit logging functionality for the Pilot Protocol. It uses Bash to manage local log files in ~/.pilot/audit and interacts with the pilotctl binary as expected. No indicators of data exfiltration, malicious execution, or prompt injection were found in SKILL.md or _meta.json.