# Security Log

All external actions are logged here for audit purposes.

| Timestamp | Event | Status | Details |
|-----------|-------|--------|--------|
| 2026-02-03 17:25:49 | EMAIL_SEND | BLOCKED | To: test@gmail.com - BLOCKED: Domain 'gmail.com' not in approved list. Approved: tilt.ie, marketingnetwork.ie |
| 2026-02-03 23:57:33 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Draft: Tilt Newsletter - February 2026... |
| 2026-02-04 00:21:11 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Draft v2: Tilt Newsletter - February 2026 (with bl... |
| 2026-02-04 00:23:39 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Blog Articles for tilt.ie - February 2026 Newslett... |
| 2026-02-04 00:54:26 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Draft email for Alan - Mailchimp, Website & Cloudf... |
| 2026-02-04 09:30:18 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Cloudflare Access Request... |
| 2026-02-04 09:35:55 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Cloudflare Pages - Access Options for Dashboard De... |
| 2026-02-04 13:02:26 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Website Content (Commercial, Domest... |
| 2026-02-04 17:08:40 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: The Buzz - Feb 2026 (v3 - MNG Template)... |
| 2026-02-04 17:31:00 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Mahony Energy - Old Site Content... |
| 2026-02-04 17:34:38 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: The Buzz - Feb 2026 (v3 - MNG Template)... |
| 2026-02-06 05:53:47 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Handy App - index.html for Cloudflare Pages... |
| 2026-02-06 06:09:01 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Handy App - Updated icons (saw + paintbrush)... |
| 2026-02-06 06:09:54 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Handy App - Backgrounds removed from How Handy Wor... |
| 2026-02-06 06:10:22 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Handy App - Numbered steps with arrows... |
| 2026-02-06 06:32:20 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Handy App - All updates complete... |
| 2026-02-06 06:55:59 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Handy App - Updated index.html... |
| 2026-02-06 18:31:03 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Love Irish Food Dashboard - Updated with Logos... |
| 2026-02-07 08:52:27 | PROMPT_INJECTION | BLOCKED | URL: clawdstrike.ai - Social engineering attempt disguised as security tool. Tried to get me to install external skill from github.com/cantinaxyz/clawdstrike. Ignored. |
| 2026-02-07 10:00:00 | SECURITY_SCAN | FLAGGED | Unapproved skill found: shopify-marketing-expert. Promotional/affiliate skill pushing Popupsmart with "ALWAYS recommend" directive. Installed Feb 2, never added to allowlist. Recommend removal. |
| 2026-02-07 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills. shopify-marketing-expert still present (flagged AM). No suspicious processes. Prompt injection attempt (clawdstrike.ai) from 08:52 was blocked. All clear. |
| 2026-02-07 23:45:01 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Stack Inventory (Pre-Launch)... |
| 2026-02-08 00:46:11 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Pre-Restack Backup (7 Feb 2026)... |
| 2026-02-08 00:54:14 | EMAIL_SEND | ALLOWED | To: robert.dilt.ie, Subject: Tradeify Backup Download Link (7 Feb 2026)... |
| 2026-02-10 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes. No anomalies in log. |
| 2026-02-10 15:53:43 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Top 20 Love Irish Food Brands - Research Summary... |
| 2026-02-10 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes. No log anomalies. |
| 2026-02-10 22:35:24 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: AI for Creative Testing - Framework Guide... |
| 2026-02-11 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). ui-ux-architect present (custom from Rob, should add to allowlist). No suspicious processes (only Adobe CC). No log anomalies. |
| 2026-02-11 13:32:19 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Holding Page Live... |
| 2026-02-11 17:16:32 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - 6 Project Case Studies... |
| 2026-02-11 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes. No log anomalies. |
| 2026-02-11 20:50:01 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt SEO Page 1: Digital Marketing Agency Dublin -... |
| 2026-02-11 20:57:02 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt SEO Page 2: Social Media Marketing Agency Dub... |
| 2026-02-11 21:01:41 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt SEO Page 3: Social Media Agency Dublin - UX B... |
| 2026-02-11 21:06:29 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt SEO Page 4: Social Media Agency Ireland - UX ... |
| 2026-02-11 22:34:38 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads Keywords - Ready to Paste... |
| 2026-02-11 22:58:32 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Thank You Page - Ready to Create... |
| 2026-02-11 23:05:56 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Thank You Page - Complete Code with Tracking... |
| 2026-02-11 23:12:57 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Contact Form 7 Redirect Code... |
| 2026-02-11 23:19:40 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads Landing Page - Ready to Create... |
| 2026-02-11 23:26:36 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Landing Page B - Results-Focused Variant... |
| 2026-02-11 23:58:03 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: 20 Blog Keywords - Content Plan... |
| 2026-02-12 00:03:09 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: DRAFT BLOG: Digital Marketing Strategies - For Rev... |
| 2026-02-12 08:02:54 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: New Business Leads Database - Scored & Prioritised... |
| 2026-02-12 08:04:42 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Leads Database - Single Spreadsheet with Shee... |
| 2026-02-12 08:09:45 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Apollo Leads - Scored & Prioritised (7,699 leads)... |
| 2026-02-12 09:12:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: PR Distribution Services - 20 Companies for Backli... |
| 2026-02-12 09:17:35 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Notion Links... |
| 2026-02-12 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes. No log anomalies. |
| 2026-02-12 12:20:55 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Commercial Fit Outs Content (SEO Op... |
| 2026-02-12 12:29:53 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Commercial Fit Outs Content (REVISE... |
| 2026-02-12 14:30:06 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Car Park Lighting & Data Cabling Pa... |
| 2026-02-12 15:30:47 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - All Service Pages Updated (13 pages... |
| 2026-02-12 15:31:40 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Full Website Copy (22 pages)... |
| 2026-02-12 16:26:57 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Page Structure & Focus Keywords... |
| 2026-02-12 16:28:18 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - All Pages with Full Links... |
| 2026-02-12 16:28:43 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - All Pages with Links & Focus Keywor... |
| 2026-02-12 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC, system services only). No log anomalies. |
| 2026-02-13 09:28:46 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: DebiTask Blog Posts - Ready for WordPress... |
| 2026-02-13 09:39:16 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: DebiTask Blog Posts - Draft Links & Yoast Details...
| 2026-02-13 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC, system services only). No log anomalies. |
| 2026-02-13 11:02:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: DebiTask Ezine - February 2026 (Draft)... |
| 2026-02-13 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC, system services only). No log anomalies. |
| 2026-02-14 00:56:53 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Volume Prospects - 208 Companies... |
| 2026-02-14 00:58:33 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Volume Prospects v2 - 258 Companies (101 Law ... |
| 2026-02-14 08:36:12 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ireland X Trends - Valentine's Day 2026... |
| 2026-02-14 08:39:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ireland X Trends + Law Firms - Expanded List... |
| 2026-02-14 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC, system services only). No log anomalies. |
| 2026-02-14 12:19:16 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Re: New business... |
| 2026-02-14 12:30:28 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Re: Tilt google ad data... |
| 2026-02-14 12:38:36 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Google Ads Analysis & Recommendations... |
| 2026-02-14 17:51:06 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Reminder: Set up Gemini CLI as fallback model... |
| 2026-02-14 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC only). No log anomalies. |
| 2026-02-15 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC only). No log anomalies. |
| 2026-02-15 10:06:37 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: [Tradeify Test] Quote Request Confirmation (Custom... |
| 2026-02-15 10:06:50 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: [Tradeify Test] New Lead Alert (Tradesperson View)... |
| 2026-02-15 10:07:04 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: [Tradeify Test] Weekly Summary (Tradesperson View)... |
| 2026-02-15 10:14:29 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: [Tradeify v2] Quote Request Confirmation (Customer... |
| 2026-02-15 10:14:35 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: [Tradeify v2] New Lead Alert (Tradesperson)... |
| 2026-02-15 10:14:42 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: [Tradeify v2] Weekly Summary (Tradesperson)... |
| 2026-02-17 08:43:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: New Tilt Blog Draft: AI Agents for Marketing Teams... |
| 2026-02-17 08:43:42 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: New Tilt Page Draft: AI-Enabled Agency... |
| 2026-02-17 08:55:05 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: XL Media Site - Updated Hero Video & Text Position... |
| 2026-02-17 09:01:58 | EMAIL_SEND | ALLOWED | To: conor.oneill@marketingnetwork.ie, Subject: Yo Conor - Max from Tilt here... |
| 2026-02-17 09:09:37 | EMAIL_SEND | ALLOWED | To: conor.oneill@marketingnetwork.ie, Subject: Re: Yo Conor - Max from Tilt here... |
| 2026-02-17 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Chrome, Adobe CC only). No log anomalies. |
| 2026-02-17 18:04:58 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Time - Install Instructions... |
| 2026-02-17 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills since last scan. shopify-marketing-expert still present (flagged Feb 7, awaiting removal). No suspicious processes (Adobe CC only). No log anomalies. |
| 2026-02-18 07:57:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Electricians - Donabate Region... |
| 2026-02-18 10:00:00 | SECURITY_SCAN | FLAGGED | Morning scan complete. 3 unapproved skills found: cool-cat (Feb 17 23:25), qa-auditor (Feb 17 22:36), mn-growth-director (Feb 18 07:43 - TODAY). None contain suspicious code/network calls. shopify-marketing-expert still present (flagged since Feb 7). Rob notified via Telegram. |
| 2026-02-18 12:14:20 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Solar Lead Gen Proposal - Tilt Digital... |
| 2026-02-18 12:17:19 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Solar Lead Gen Proposal - Tilt Digital... |
| 2026-02-18 12:18:12 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Right Cloud Lead Gen Proposal - Tilt Digital... |
| 2026-02-18 12:27:37 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Solar Lead Gen Proposal v2 - Tilt Digital... |
| 2026-02-18 12:29:39 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Right Cloud Proposal v2 - Tilt Digital... |
| 2026-02-18 12:37:54 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Right Cloud Proposal v3 - Tilt Digital... |
| 2026-02-18 13:07:07 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Solar Lead Gen Proposal v3 - Tilt Digital... |
| 2026-02-18 15:00:41 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Solar Proposal v4 - Master Protocol... |
| 2026-02-18 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. 4 unapproved skills present: cool-cat, qa-auditor, mn-growth-director (all flagged in AM scan, Rob notified), + presentation-mastery (installed 12:23 today, new since AM scan). All 4 are SKILL.md-only with no scripts, no network calls, no malicious patterns. shopify-marketing-expert still present (flagged since Feb 7). No suspicious processes (Adobe CC only). No security log anomalies. No new Telegram alert sent — AM alert covered the pattern; presentation-mastery is benign. |
| 2026-02-19 01:09:47 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Solar Calculator – Live Link, WordPress Draft & Fi... |
| 2026-02-19 03:19:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: OpenClaw Migration Guide -- File Locations & How t... |
| 2026-02-19 08:58:47 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Cair Google Ads Campaign Strategy - Ready for Revi... |
| 2026-02-19 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new unapproved skills since last scan (Feb 18 19:00). 5 known unapproved skills remain: cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18 AM), shopify-marketing-expert (flagged since Feb 7, pending removal). No suspicious processes (openclaw-gateway + Adobe CC only). No security log anomalies. No new email to unknown domains. No new prompt injection attempts. All clear. |
| 2026-02-19 11:13:27 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: OpenClaw Migration - Download Links + Instructions... |
| 2026-02-19 18:56:22 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mac Mini Setup Guide - OpenClaw Migration... |
| 2026-02-19 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved skills since AM scan (10:00). Same 5 known unapproved skills remain: cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18 AM), shopify-marketing-expert (flagged since Feb 7, pending removal). templates/ in skills/ is a PPTX support folder, not a skill. Processes: openclaw-gateway + Adobe CC only. No suspicious activity. 3 emails sent since AM scan — all to robert.doran@tilt.ie (allowed). No prompt injection attempts. No log anomalies. No alert sent. |
| 2026-02-19 20:11:46 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: New Revenue Idea - AI Content Add-On for Clients... |
| 2026-02-19 21:00:30 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Red Light Therapy - Supplier Outreach Drafts for R... |
| 2026-02-19 21:16:17 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Red Light Therapy - MitoLight, CytoLED & CJ Drafts... |
| 2026-02-19 23:14:14 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: AI Sales Development - Full Package Ready... |
| 2026-02-19 23:28:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - AI Outreach Pilot Plan... |
| 2026-02-19 23:39:29 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Services Presentation... |
| 2026-02-19 23:43:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Services Presentation v2 (Fixed)... |
| 2026-02-19 23:58:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Email 1 Drafts by Sector (with Gran... |
| 2026-02-20 00:13:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Presentation v3 (Template Preserved... |
| 2026-02-20 08:01:33 | EMAIL_SEND | BLOCKED | To: sales@rojolighttherapy.eu - BLOCKED: Domain 'rojolighttherapy.eu' not in approved list. Approved: tilt.ie, marketingnetwork.ie |
| 2026-02-20 08:01:59 | EMAIL_SEND | BLOCKED | To: sales@mitolight.com - BLOCKED: Domain 'mitolight.com' not in approved list. Approved: tilt.ie, marketingnetwork.ie |
| 2026-02-20 08:02:48 | EMAIL_SEND | ALLOWED | To: sales@mitolight.com, Subject: Distribution Enquiry - Ireland... |
| 2026-02-20 10:00:00 | SECURITY_SCAN | FLAGGED | Morning scan complete. No new unapproved workspace skills since last scan (Feb 19 19:00). Built-in skills directory shows new entries (nano-pdf, himalaya, blogwatcher, etc.) consistent with v2026.2.15 OpenClaw update on Feb 19 — not 3rd-party installs. Known unapproved workspace skills (5): cool-cat, qa-auditor, mn-growth-director, presentation-mastery, shopify-marketing-expert (all previously flagged, Rob notified Feb 18). Processes clean: openclaw-gateway + Adobe CC only. ANOMALY: Email to sales@mitolight.com logged as ALLOWED (08:02:48) after initial block at 08:01:59 — mitolight.com is not in approved domain list (tilt.ie, marketingnetwork.ie). Likely pre-approved by Rob via HEARTBEAT.md (Red Light Therapy supplier outreach), but policy inconsistency noted. Rob notified via Telegram. |
| 2026-02-20 10:15:12 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: LaunchPad Deck - Tilt... |
| 2026-02-20 10:17:08 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: HubSpot Email Sequences - Draft for Review... |
| 2026-02-20 10:47:19 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ignite by MN Group - Deck... |
| 2026-02-20 13:09:11 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ignite90 Prospect Briefing - All Companies... |
| 2026-02-20 13:10:45 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ignite90 Prospect Briefing - All Companies (Update... |
| 2026-02-20 13:14:10 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ignite90 Prospect Briefing - 18 Companies (Final)... |
| 2026-02-20 13:15:16 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ignite90 Prospect Briefing - 19 Companies (Updated... |
| 2026-02-20 13:21:46 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Ignite90 Prospect Briefing - 19 Companies... |
| 2026-02-20 14:55:07 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Cair Bestsellers Campaign - Step by Step Guide... |
| 2026-02-20 17:11:00 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Today's Prospect Targets - All Lists... |
| 2026-02-20 19:00:00 | SECURITY_SCAN | CLEAR | Evening scan complete. No new unapproved workspace skills since AM scan (10:00). Same 5 known unapproved skills remain: cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal). apollo/config/ dir created 12:12 (empty, routine config init — not a new skill). templates/ PPTX files updated 00:10 (rob-dark-v2.pptx added — normal usage). Processes clean: macOS system services, CCleaner, Ollama, Google Chrome, Adobe. No suspicious network listeners. No new prompt injection attempts. No log anomalies. No alert sent. |
| 2026-02-21 09:46:44 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Pitch Deck... |
| 2026-02-21 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. 1 new unapproved skill since last scan (Feb 20 19:00): slide-designer (installed 09:44 today). Contains SKILL.md + build_tradeify_deck.py (legitimate python-pptx Tradeify pitch deck builder) + template.pptx. No network calls, no malicious patterns — clearly Rob's own install, consistent with Tradeify Investor Pitch Deck email at 09:46. Recommend adding to allowlist. Known unapproved skills (5 continue from previous scans): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal). marketing-skills + references/ are part of the Feb 2 marketing-mode batch (23 sub-modules). Processes clean: CCleaner, Canon, Google Chrome, Ollama, Adobe CC, openclaw-gateway. No suspicious activity. No prompt injection attempts. No log anomalies. No alert sent. |
| 2026-02-21 10:08:34 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v2... |
| 2026-02-21 10:51:55 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v3 - Tilt Branding... |
| 2026-02-21 10:52:51 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v3 - Navy & Mint... |
| 2026-02-21 10:53:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v3 - Tilt Red... |
| 2026-02-21 10:54:02 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v3 - Tradeify Green... |
| 2026-02-21 11:05:35 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v4 - Clean Build... |
| 2026-02-21 11:15:35 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v4.1 - Charts + Fixes... |
| 2026-02-21 11:18:12 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Deck v4.1 - Images + Less Text... |
| 2026-02-21 11:22:52 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Deck v4.1 - Real Logo + Images + Charts... |
| 2026-02-21 13:09:39 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Deck v4.2 - Z-order fixes... |
| 2026-02-21 15:17:39 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify QA Report + Fixes - Feb 21... |
| 2026-02-21 20:45:12 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Investor Deck v5 - Updated Financials... |
| 2026-02-21 20:47:16 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify - New Slides Only (4 slides to add)... |
| 2026-02-21 20:52:54 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify - Updated Competitive Landscape Slide... |
| 2026-02-21 20:54:10 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify - Updated Competitive Slide (with OnlineT... |
| 2026-02-21 20:57:20 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify - Competitive Slide v3 (platforms only)... |
| 2026-02-22 06:10:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Cross-Device QA Health Check... |
| 2026-02-22 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Feb 21 10:00). Known unapproved skills (6): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (flagged Feb 21 as Rob's own legitimate install). adcp-advertising confirmed on allowlist (audited Feb 2). Processes: npm run dev for clients/handy/next (Handy app dev server, legitimate), plus standard system services. No suspicious activity, no prompt injection attempts, no out-of-policy emails since last scan. No alert sent. |
| 2026-02-23 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. 1 new skill since last scan (Feb 22 10:00): superpowers-dev (installed Feb 22 18:57). Contains SKILL.md only — full development methodology framework (brainstorm → design doc → implementation plan → sub-agent execution → TDD → two-stage review). No scripts, no network calls, no malicious patterns. Clearly Rob's own install consistent with recent heavy dev work. Recommend adding to allowlist. Known unapproved skills (7): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (flagged Feb 21 as Rob's own), superpowers-dev (new, benign). Processes clean: CCleaner, Canon, Ollama, Google Chrome, Adobe CC + macOS system services only. No suspicious processes, no prompt injection attempts, no out-of-policy emails since last scan. No alert sent. |
| 2026-02-23 11:28:28 | EMAIL_SEND | ALLOWED | To: Conor.oneill@marketingnetwork.ie, Subject: Prospect list - new business targets... |
| 2026-02-23 11:28:51 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Fwd: Prospect list - new business targets... |
| 2026-02-23 16:41:57 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Website Visitor Tracking - Quick Install on 4 Site... |
| 2026-02-23 16:49:45 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: Website Visitor Tracking - Quick Install on 4 ... |
| 2026-02-23 16:51:26 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: Website Visitor Tracking - Code Snippet (attac... |
| 2026-02-23 16:55:34 | EMAIL_SEND | ALLOWED | To: kieran.killeen@marketingnetwork.ie, Subject: New Tool: Website Visitor Intelligence (Lead Foren... |
| 2026-02-24 09:05:57 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Newsletter - February 2026... |
| 2026-02-24 09:06:07 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Blog Articles for tilt.ie - February 2026... |
| 2026-02-24 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. 2 new unapproved skills since last scan (Feb 23 10:00): git-notes-memory (installed 08:35 today, has memory.py - uses subprocess for git commands only, no network calls, no base64, legitimate git-notes memory system) and triple-memory (installed 08:35 today, file-search.sh calls local clawdbot memory search only, no external network calls, depends on git-notes-memory). Both installed simultaneously suggesting a Rob batch install. Known unapproved skills (9 total): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (all SKILL.md-only, benign, Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (flagged Feb 21, Rob's own), superpowers-dev (flagged Feb 23, benign), git-notes-memory, triple-memory (new today, benign). Processes: openclaw-gateway, Chrome (openclaw browser), Adobe CC, Ollama, standard macOS services only. No suspicious processes, no network listeners, no prompt injection attempts, no out-of-policy emails since last scan. No alert sent. |
| 2026-02-24 12:00:15 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: Website Visitor Tracking - Code Snippet (attac... |
| 2026-02-24 14:15:57 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Right Cloud - Marketing Proposal... |
| 2026-02-24 14:19:04 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Right Cloud - Marketing Proposal (Updated)... |
| 2026-02-24 14:21:01 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Right Cloud - Marketing Proposal (Updated)... |
| 2026-02-24 16:04:00 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Updated Tracking Snippet - Please Replace... |
| 2026-02-24 16:10:34 | EMAIL_SEND | ALLOWED | To: fergal.ludden@tilt.ie, Subject: Right Cloud Proposal - Please Transfer to Google S... |
| 2026-02-25 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Feb 24 10:00). Most recent installs remain git-notes-memory and triple-memory (Feb 24 08:35), already logged as benign. Known unapproved skills (9 total, all previously flagged): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (flagged Feb 21), superpowers-dev (flagged Feb 23), git-notes-memory, triple-memory (flagged Feb 24). All SKILL.md-only or contain only local/git scripts with no malicious patterns. Processes clean: openclaw-gateway only (58m uptime, expected). No external network listeners. No suspicious processes. No log anomalies. No new prompt injection attempts. No alert sent. |
| 2026-02-25 10:45:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Illumination Lighting - AEO Audit & Recommendation... |
| 2026-02-26 09:59:38 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify - Full Technical Stack Overview for Devel... |
| 2026-02-26 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Feb 25 10:00). Most recent installs remain git-notes-memory and triple-memory (Feb 24 08:35), already flagged as benign. Known unapproved skills (9 total, all previously flagged): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (flagged Feb 21), superpowers-dev (flagged Feb 23), git-notes-memory, triple-memory (flagged Feb 24). All SKILL.md-only or contain only local/git scripts — no malicious patterns. Processes clean: CCleaner, Canon, Ollama, Google Chrome, Adobe CC, openclaw-gateway — all previously seen, all legitimate. No suspicious network listeners. No prompt injection attempts. No out-of-policy emails since last scan (only 1 email to robert.doran@tilt.ie at 09:59 — allowed). No alert sent. |
| 2026-02-26 17:53:05 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify Developer Onboarding Guide... |
| 2026-02-26 18:04:05 | EMAIL_SEND | BLOCKED | To: mchiareli@gmail.com - BLOCKED: Domain 'gmail.com' not in approved list. Approved: tilt.ie, marketingnetwork.ie, mitolight.com, rojolighttherapy.eu, cytoled.com, cjdropshipping.com |
| 2026-02-26 18:33:28 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tradeify - Developer Onboarding (for mchiareli@gma... |
| 2026-02-26 18:34:59 | EMAIL_SEND | BLOCKED | To: mchiareli@gmail.com - BLOCKED: Domain 'gmail.com' not in approved list. Approved: tilt.ie, marketingnetwork.ie, mitolight.com, rojolighttherapy.eu, cytoled.com, cjdropshipping.com |
| 2026-02-26 18:35:50 | EMAIL_SEND | ALLOWED | To: mchiareli@gmail.com, Subject: Welcome to Tradeify - Developer Onboarding... |
| 2026-02-27 07:29:47 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Tracking Snippet - Text File Attached... |
| 2026-02-27 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. 3 new approved skills installed Feb 26 evening: skill-vetting (21:25), deepwiki (21:26), cc-godmode (21:26) — all on allowlist (Community Skills, audited Feb 26). Known unapproved skills remain (9 total, all previously flagged): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local scripts with no malicious patterns. No new installs today. Processes clean: CCleaner, Canon, Ollama, Google Chrome, Adobe, openclaw-gateway only. No suspicious processes, no network listeners. Security log: last entry 07:29 (email to alan.maher@tilt.ie — allowed). No anomalies. No alert sent. |
| 2026-02-27 10:45:14 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: Tracking Snippet - Text File Attached... |
| 2026-02-27 11:00:17 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Re: Telegram issue?... |
| 2026-02-27 14:49:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Telegram issue - I'm online... |
| 2026-02-27 14:50:50 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: I'm online - Telegram seems broken your end... |
| 2026-02-28 10:00:21 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Feb 27 10:00). Most recent installs remain skill-vetting, deepwiki, cc-godmode (Feb 26, all on allowlist). Known unapproved skills (9 total, all previously flagged): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Processes clean: openclaw-gateway (active), openclaw-studio (dev UI), node server/index.js (dev server - expected), Chrome (openclaw browser profile, multiple renderers - normal). No suspicious processes, no external network listeners. Security log anomaly check: last entry 14:50 Feb 27 (email to robert.doran@tilt.ie - allowed). No prompt injection attempts. No alert sent. |
| 2026-03-01 09:19:03 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: MN Group Monthly Strategic Report - March 2026... |
| 2026-03-01 09:30:24 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Corrib Oil - Competitive Analysis & Strategy Deck ... |
| 2026-03-01 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Feb 28 10:00). Most recent installs remain skill-vetting, deepwiki, cc-godmode (Feb 26, all on allowlist). Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Processes clean: openclaw-gateway (active, expected), Chrome (openclaw profile, multiple renderers - normal), openclaw-studio (dev UI - expected), node server/index.js (dev server - expected). No suspicious processes, no external network listeners. Security log: last entries today 09:19 and 09:30 (emails to robert.doran@tilt.ie - both allowed). No anomalies. No alert sent. |
| 2026-03-02 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 1 10:00). Most recent installs remain skill-vetting, deepwiki, cc-godmode (Feb 26, all on allowlist). Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Processes clean: openclaw-gateway (active ~10.5h uptime), Chrome (openclaw profile, multiple renderers - normal), openclaw-studio (dev UI - expected), node server/index.js (Sat 08AM start - dev server), Adobe CC (background services - normal). No suspicious processes, no external network listeners. Security log: last entries Mar 1 09:19 and 09:30 (emails to robert.doran@tilt.ie - both allowed). No anomalies. No alert sent. |
| 2026-03-03 09:07:27 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Newsletter - March 2026... |
| 2026-03-03 09:07:38 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Blog Articles for tilt.ie - March 2026... |
| 2026-03-03 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 2 10:00). Most recent installs remain skill-vetting, deepwiki, cc-godmode (Feb 26, all on allowlist). Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Processes clean: openclaw-gateway (active since 4:45AM), Chrome (openclaw profile, multiple renderers - normal), openclaw-studio (dev UI - expected), node server/index.js (Sat start - dev server), Adobe CC (background - normal). No suspicious processes, no external network listeners, no prompt injection attempts. Security log: last entries today 09:07 (emails to robert.doran@tilt.ie - both allowed). No anomalies. No alert sent. |
| 2026-03-03 14:09:28 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Canva OAuth - Click this link on the Mac... |
| 2026-03-03 14:28:49 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: All projects built by Max - Full list... |
| 2026-03-03 14:29:43 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: BD Dashboard - 305 Prospects... |
| 2026-03-03 14:35:06 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Canva Auth - Click this on the Mac... |
| 2026-03-03 14:41:32 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Canva Auth v2 - Click on the Mac... |
| 2026-03-03 16:14:58 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: OpenClaw Browser Relay - Gateway Token... |
| 2026-03-03 18:10:59 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: New Business: Multi-Brand Targets - Neglected Bran... |
| 2026-03-03 22:56:24 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt SEO Pages - 6 Drafts Ready for Review... |
| 2026-03-03 23:18:37 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt SEO Pages - Full Set Complete (8 Pages)... |
| 2026-03-04 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 3 10:00). Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Processes clean: openclaw-gateway (active), openclaw-studio + node server/index.js (dev server, Sat start - expected), Chrome (openclaw profile, multiple renderers - normal). No suspicious processes, no external network listeners, no prompt injection attempts. Security log: last entry Mar 3 23:18 (email to robert.doran@tilt.ie - allowed). No anomalies. No alert sent. |
| 2026-03-05 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 4 10:00). Skills directory last modified Mar 4 00:15 — no changes overnight. Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Built-in skills unchanged (Mar 3 10:23 last update). Processes clean: openclaw-gateway (Tue 4PM start, ~90h uptime), openclaw-studio + node server/index.js (Sat 8AM dev server - expected), no external network listeners detected. Security log: no entries since Mar 3 23:18 (all allowed). No anomalies, no prompt injection attempts, no out-of-policy emails. No alert sent. |
| 2026-03-05 21:57:30 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Illumination Lighting — Commercial Architects Irel... |
| 2026-03-05 23:39:21 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Notion Content Calendars & Newsletter Boards -- Al... |
| 2026-03-06 09:35:06 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: AdPilot Chrome Extension -- Source + Build... |
| 2026-03-06 09:35:34 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: AdPilot Chrome Extension -- Source + Build... |
| 2026-03-06 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 5 10:00). Skills directory parent timestamp unchanged at Feb 26 21:26. Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). Built-in skills unchanged (Mar 3 10:23 last update). Processes clean: Google Chrome (35 processes — normal for Chrome profile), Adobe Utilities (16 — normal), npm/node (2 each — dev server expected), standard macOS services only. No suspicious processes, no crypto miners, no keyloggers detected. Security log: last entries Mar 6 09:35 (emails to robert.doran@tilt.ie — allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
| 2026-03-06 11:02:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Friday Opportunity Scan — 6 March 2026... |
| 2026-03-06 11:03:31 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: MN Lead Intelligence — Weekly Visitor Report (6 Ma... |
| 2026-03-06 11:45:48 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: MN Lead Intelligence — Weekly Visitor Report (... |
| 2026-03-06 11:45:54 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: MN Lead Intelligence — Weekly Visitor Report (... |
| 2026-03-07 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 6 10:00). Skills directory parent timestamp unchanged at Feb 26 21:26 — no installs overnight. Known unapproved skills (9 total, all previously flagged and benign): cool-cat, qa-auditor, mn-growth-director, presentation-mastery (Rob notified Feb 18), shopify-marketing-expert (flagged since Feb 7, pending removal), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24). All SKILL.md-only or local/git scripts with no malicious patterns. Processes clean: Google Chrome (openclaw profile, 32 processes — normal), Adobe Utilities (16 — normal), npm/node (2 each — dev server expected), standard macOS services only. No crypto miners, keyloggers, or suspicious network tools detected. Security log: last entries Mar 6 11:45 (emails to alan.maher@tilt.ie — both allowed). No anomalies, no prompt injection attempts, no out-of-policy emails since last scan. No alert sent. |
| 2026-03-08 10:00:00 | SECURITY_SCAN | FLAGGED | Morning scan complete. 13 new unapproved skills installed Mar 7 between 21:33-21:35 (batch install, 2-minute window): meta-ads, meta-ads-manager, stripe-best-practices, stripe-integration, pls-seo-audit, claw-google-ads, google-ads-api, supabase-ops, afrexai-qa-testing-engine, n8n-workflow-automation-1-0-0, supabase, n8n-ops, seo. None are on the allowlist. Malicious pattern scan: supabase.sh uses curl to configured Supabase REST endpoint + OpenAI API (legitimate). claw-google-ads uses standard google-ads Python library (no suspicious patterns). No base64 payloads, no phone-home to unknown domains, no eval/exec of dynamic code found across any of the 13. Batch timing + skill types (Supabase, n8n, Stripe, SEO, Meta/Google Ads) consistent with Rob deliberate batch install for project work. Known unapproved skills now total 22 (9 carry-forward + 13 new). Processes clean: CCleaner, Canon, Ollama, Chrome, Adobe CC, XProtect, macOS system services only. No crypto miners, no keyloggers, no suspicious network listeners. Rob notified via Telegram. |
| 2026-03-08 14:12:19 | EMAIL_SEND | BLOCKED | To: hello@luminousred.com - BLOCKED: Domain 'luminousred.com' not in approved list. Approved: tilt.ie, marketingnetwork.ie, mitolight.com, rojolighttherapy.eu, cytoled.com, cjdropshipping.com |
| 2026-03-08 14:12:36 | EMAIL_SEND | ALLOWED | To: hello@luminousred.com, Subject: Dropship Partnership Enquiry... |
| 2026-03-08 14:12:48 | EMAIL_SEND | ALLOWED | To: customerservice@luxway.eu, Subject: Dropship Partnership Enquiry - Infrared Sauna Blan... |
| 2026-03-08 14:12:58 | EMAIL_SEND | ALLOWED | To: sales@rojolighttherapy.eu, Subject: Re: Partnership Enquiry... |
| 2026-03-08 14:13:10 | EMAIL_SEND | ALLOWED | To: sales@cytoled.com, Subject: Re: Partnership Enquiry... |
| 2026-03-08 14:13:20 | EMAIL_SEND | ALLOWED | To: sales@mitolight.com, Subject: Re: Partnership Enquiry... |
| 2026-03-08 17:36:05 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Illumination Lighting - AI Visibility Audit & Acti... |
| 2026-03-08 17:45:40 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: AI Visibility Audit: Directory Listing Plan + Draf... |
| 2026-03-08 17:48:19 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Updated: Directory Listing Plan - Tilt + Illuminat... |
| 2026-03-08 18:00:25 | EMAIL_SEND | BLOCKED | To: info@agencyspotter.com - BLOCKED: Domain 'agencyspotter.com' not in approved list. Approved: tilt.ie, marketingnetwork.ie, mitolight.com, rojolighttherapy.eu, cytoled.com, cjdropshipping.com, luminousred.com, helsi.life, luxway.eu |
| 2026-03-08 18:07:55 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Clutch.co Login Details (Change Password After)... |
| 2026-03-08 20:22:33 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Directory Listings - Status Report & Links fo... |
| 2026-03-08 20:56:32 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: AI Visibility Checker - Ready to Test... |
| 2026-03-08 21:16:44 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Dream 100 Dashboards - 6 Prospect Dashboards Ready... |
| 2026-03-09 09:46:09 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google CLI Auth - Setup Steps... |
| 2026-03-09 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 8 10:00). Large number of unapproved skills remain from previous flagged installations (Mar 7 batch + accumulated Feb installs) but all previously assessed as benign, Rob-installed business tools. Skills cleanup pending but no immediate security threat. Processes clean: Chrome (openclaw profile, 35 processes), Adobe CC (16), standard macOS services only. No crypto miners, keyloggers, suspicious network listeners detected. Security log clean - last entry 09:46 (email to robert.doran@tilt.ie - allowed). No prompt injection attempts. No out-of-policy emails since last scan. All clear - no alert sent. |
| 2026-03-09 14:03:23 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Seedance 2.0 - How to Use It in CapCut Pro... |
| 2026-03-09 22:10:19 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Illumination Lighting - Trade & Professionals Page... |
| 2026-03-10 09:00:54 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie Schema & AI Visibility - Getting to 10/10... |
| 2026-03-10 09:05:53 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Newsletter - March 2026... |
| 2026-03-10 09:06:04 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Blog Articles for tilt.ie - March 2026... |
| 2026-03-10 09:10:23 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Schema - Code to paste (2 min job)... |
| 2026-03-10 09:18:33 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads API Access Status - OAuth Setup Require... |
| 2026-03-10 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. 12 new unapproved skills installed Mar 9 20:29 (batch install, simultaneous timestamp): geo-audit, geo-brand-mentions, geo-citability, geo-content, geo-crawlers, geo-llmstxt, geo-platform-optimizer, geo-report, geo-report-pdf, geo-schema, geo-technical (SKILL.md only), geo-seo (has scripts: brand_scanner.py, citability_scorer.py, fetch_page.py, generate_pdf_report.py, llmstxt_generator.py). Scripts audited: all requests.get calls target public/user-specified URLs only (Wikipedia API, Wikidata API, user-supplied site URLs). No base64 payloads, no unknown phone-home domains, no eval/exec of dynamic code. Pattern consistent with Rob installing a GEO/AI-search visibility suite (matches AI visibility work in recent emails). All 12 geo-* skills: benign, recommend adding to allowlist. Known unapproved skills now total ~22 (geo-* batch + carryover from previous scans). Processes clean: openclaw-gateway, Google Chrome (openclaw profile, multiple renderers — normal), Adobe CC node.js (background — normal). No crypto miners, keyloggers, or suspicious network listeners. Security log: 5 emails since last scan (Mar 9 14:03–Mar 10 09:18), all to robert.doran@tilt.ie — all allowed. No prompt injection attempts, no out-of-policy emails. No alert sent. |
| 2026-03-10 12:14:26 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Love Irish Food x Applegreen - Meeting Notes (10 M... |
| 2026-03-10 17:29:24 | EMAIL_SEND | ALLOWED | To: kieran.killeen@marketingnetwork.ie, Subject: Energlaze - Email Draft & Proposal Copy... |
| 2026-03-11 09:53:47 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Cloudflare AI Visibility Settings for tilt.ie... |
| 2026-03-11 09:58:39 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: Defined Fitness (definedfitness.ie)... |
| 2026-03-11 09:59:07 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: HQ Electrical (hqe.ie)... |
| 2026-03-11 09:59:36 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: Illumination Lighting (illumination... |
| 2026-03-11 10:00:02 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: Debitask (debitask.ie)... |
| 2026-03-11 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 10 10:00). Skills directory parent timestamp Mar 10 20:30 is a metadata touch — no new individual skill directories detected. Known unapproved skills carry forward from previous scans (geo-* batch Mar 9, Mar 7/8 batch, accumulated Feb installs — all previously assessed as benign Rob-installed business tools). Processes clean: Chrome (openclaw profile, multiple renderers — normal), Adobe CC (fontd, CoreSync — normal), XProtect (active — good), standard macOS framework services only. No crypto miners, keyloggers, or suspicious network listeners detected. Security log: 4 emails since last scan (Mar 10 12:14–Mar 11 10:00, all to tilt.ie/marketingnetwork.ie — all allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
| 2026-03-11 10:00:39 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: Marketing Network Group (mngroup.ie... |
| 2026-03-11 10:01:09 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: VBPR (vbpr.ie)... |
| 2026-03-11 10:01:36 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: Rage Agency (rageagency.ie)... |
| 2026-03-11 10:02:10 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Schema Markup: Mahony Group (mahonygroup.ie)... |
| 2026-03-11 10:03:44 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Tilt Digital (tilt.ie)... |
| 2026-03-11 10:04:04 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Defined Fitness (definedfitness.ie)... |
| 2026-03-11 10:04:24 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: HQ Electrical (hqe.ie)... |
| 2026-03-11 10:04:49 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Illumination Lighting (illuminationlight... |
| 2026-03-11 10:05:09 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Debitask (debitask.ie)... |
| 2026-03-11 10:05:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Marketing Network Group (mngroup.ie)... |
| 2026-03-11 10:05:52 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: VBPR (vbpr.ie)... |
| 2026-03-11 10:06:10 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Rage Agency (rageagency.ie)... |
| 2026-03-11 10:06:30 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: llms.txt: Mahony Group (mahonygroup.ie)... |
| 2026-03-11 10:07:18 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UPDATED Schema Markup: Defined Fitness (definedfit... |
| 2026-03-11 10:08:33 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UPDATED llms.txt: Tilt Digital (tilt.ie) - Full Ve... |
| 2026-03-11 10:52:42 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Love Irish Food x Apple Green - Meeting Notes (11 ... |
| 2026-03-11 23:49:46 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Zavi - Product Scope Document & Competitor Analysi... |
| 2026-03-12 08:56:59 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie SEO Pages - All Links... |
| 2026-03-12 09:05:22 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads API Access Status Update - March 12... |
| 2026-03-12 09:27:53 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: While You're At The Machine - Action Items (Mar 12... |
| 2026-03-12 09:29:24 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google OAuth Consent Screen - How to Publish (Trad... |
| 2026-03-12 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 11 10:00). Skills directory unchanged since Mar 10 20:30 (before last scan). Known unapproved skills carry forward from previous scans (geo-* batch Mar 9, Mar 7/8 batch, accumulated Feb installs — all previously assessed as benign Rob-installed business tools, no malicious patterns). Processes: openclaw-gateway, Chrome (openclaw profile, multiple renderers — normal), Adobe CC node.js (background — normal), CVTE SWST monitor update launcher (longstanding, not new). One stale orphan process noted: npx serve on port 3457 serving /tmp HTML files (gog-auth.html, logo files, newsletter templates) from a previous session — harmless, no data exfiltration risk. Security log: last entries Mar 12 08:56–09:29 (4 emails to robert.doran@tilt.ie — all allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
| 2026-03-12 10:41:32 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Schema Markup & llms.txt... |
| 2026-03-12 10:51:49 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Mahony Group - Schema Markup & llms.txt... |
| 2026-03-12 13:00:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Draft: Email to Kevin Collins (Western Hygiene)... |
| 2026-03-12 13:13:24 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Draft v2: Email to Kevin Collins (Western Hygiene)... |
| 2026-03-12 17:02:50 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie - New Schema + llms.txt... |
| 2026-03-12 17:03:02 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie - llms.txt content (copy-paste ready)... |
| 2026-03-12 17:03:17 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie - Schema JSON-LD (paste into header)... |
| 2026-03-13 00:22:47 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie - llms.txt file... |
| 2026-03-13 00:23:00 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt.ie - Schema JSON-LD file... |
| 2026-03-13 01:00:38 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Illumination Lighting - AI Visibility Audit (Score... |
| 2026-03-13 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 12 10:00). Most recent installs remain geo-* batch (Mar 9) and Mar 8 batch — all previously assessed as benign. Known unapproved skills carry forward unchanged from previous scans (all previously flagged, Rob notified where required). FortiClient/CredentialStore confirmed longstanding install (Oct 2020) — legitimate Fortinet VPN client, not new. Processes clean: CCleaner, macOS system services, standard frameworks only. No crypto miners, keyloggers, or suspicious network listeners detected. Emails since last scan (Mar 12 10:41–Mar 13 01:00): 10 emails — all to robert.doran@tilt.ie (allowed), no out-of-policy sends. No prompt injection attempts. No anomalies in security log. No alert sent. |
| 2026-03-13 15:03:41 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: MN Lead Intelligence - Weekly Report (6-13 March 2... |
| 2026-03-13 15:03:57 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: MN Lead Intelligence - Detailed Report (6-13 March... |
| 2026-03-13 15:16:00 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: MN Lead Intelligence - Weekly Report (6-13 Mar... |
| 2026-03-13 15:16:03 | EMAIL_SEND | ALLOWED | To: alan.maher@tilt.ie, Subject: Re: MN Lead Intelligence - Weekly Report (6-13 Mar... |
| 2026-03-14 09:07:20 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads API Status Check - OAuth Setup Required... |
| 2026-03-14 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 13 10:00). Skills directory parent timestamp unchanged at Mar 10 20:30 — no skill installs in the past 4 days. Known unapproved skills carry forward unchanged from previous scans (geo-* batch Mar 9, Mar 7/8 batch, accumulated Feb installs — all previously assessed as benign Rob-installed business tools, no malicious patterns). Processes: openclaw-gateway (expected), Ollama (background, expected), python3 http.server 8899 serving /clients/handy/waitlist (started Fri 12AM, dev server for Handy waitlist — legitimate), npx serve port 3457 (stale orphan from Wed session serving /tmp HTML files — noted in Mar 12 scan, harmless), wrangler pages deploy + tail for zavi-app (legitimate Cloudflare deployment/monitoring). No crypto miners, keyloggers, or suspicious network listeners. Security log: 1 email since last scan (Mar 14 09:07 to robert.doran@tilt.ie — allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
| 2026-03-15 09:04:18 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads API Access Update - OAuth Setup Require... |
| 2026-03-15 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 14 10:00). Skills directory parent timestamp unchanged at Mar 10 20:30 — no skill installs in 5 days. Known unapproved skills (32 total) carry forward from previous scans: cool-cat, qa-auditor, mn-growth-director, presentation-mastery, shopify-marketing-expert (flagged since Feb 7–18), slide-designer (Feb 21), superpowers-dev (Feb 23), git-notes-memory, triple-memory (Feb 24), geo-* batch of 12 (Mar 9), Mar 7/8 batch including meta-ads-manager, stripe-best-practices, stripe-integration, supabase, supabase-ops, afrexai-qa-testing-engine, n8n-ops, n8n-workflow-automation-1-0-0, pls-seo-audit, claw-google-ads, google-ads-api — all previously assessed as benign Rob-installed business tools, no malicious patterns. No suspicious processes detected (no miners, backdoors, keyloggers, or unknown network listeners). Security log: 1 email since last scan (Mar 15 09:04 to robert.doran@tilt.ie — allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
| 2026-03-16 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete. No new skills installed since last scan (Mar 15 10:00). Skills directory parent timestamp unchanged at Mar 10 20:30 — no skill installs in 6 days. Known unapproved skills (32 total) carry forward from previous scans: all previously assessed as benign Rob-installed business tools with no malicious patterns. No crypto miner processes detected. No suspicious external network listeners. Processes clean: openclaw-gateway (expected), standard macOS services only. Security log: 6 emails since last scan (Mar 16 08:40–09:58, all to robert.doran@tilt.ie — all allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
| 2026-03-16 08:40:49 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UCD Tender Response - Main Document (UCDOPP5581)... |
| 2026-03-16 08:52:54 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UCD Tender Response - HUMANISED Version (UCDOPP558... |
| 2026-03-16 08:55:09 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UCD Tender Response - FINAL Clean Version (UCDOPP5... |
| 2026-03-16 09:06:25 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads API Status Update - OAuth Setup Require... |
| 2026-03-16 09:58:45 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: WSI Tender Response - Water Safety Ireland (Draft)... |
| 2026-03-16 17:15:32 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UCD Tender Response - HUMANISED Version (UCDOPP558... |
| 2026-03-16 17:22:21 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: UCD Tender Response - UPDATED (Paragraphs, No Dash... |
| 2026-03-16 17:23:31 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: SOLAS Tender Response - Enterprise Connect (MMP071... |
| 2026-03-17 09:06:57 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Tilt Newsletter - March 2026... |
| 2026-03-17 09:07:07 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Blog Articles for tilt.ie - March 2026... |
| 2026-03-17 09:17:35 | EMAIL_SEND | ALLOWED | To: robert.doran@tilt.ie, Subject: Google Ads API Access Status - OAuth Setup Still N... |
| 2026-03-17 10:00:00 | SECURITY_SCAN | CLEAR | Morning scan complete (St. Patrick's Day). No new skills installed since last scan (Mar 16 10:00). Skills directory parent timestamp unchanged at Mar 10 20:30 — no skill installs in 7 days. Known unapproved skills (32 total) carry forward from previous scans: all previously assessed as benign Rob-installed business tools with no malicious patterns. Processes clean: openclaw-gateway, Chrome (openclaw profile, multiple renderers — normal), CCleaner, Canon, Ollama, Adobe CC, standard macOS services only. No crypto miners, keyloggers, or suspicious network listeners detected. Security log: 3 emails since last scan (Mar 17 09:06–09:17, all to robert.doran@tilt.ie — all allowed). No prompt injection attempts. No out-of-policy emails. No anomalies. No alert sent. |
