Mova Credit Scoring
v1.0.1Submit a loan application for AI credit risk scoring and human-gated credit decision via MOVA HITL. Trigger when the user mentions a loan application, credit...
⭐ 0· 94·0 current·0 all-time
bySergii Miasoiedov@mova-compact
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description describe an AI+human credit-scoring workflow and the SKILL.md only asks to submit applicant financial data to the MOVA HITL tool (mova_hitl_start_credit) and display results. Required external services (MOVA API, credit bureau, scoring model, audit store) match the stated purpose and there are no unrelated capabilities requested.
Instruction Scope
Runtime instructions are narrowly scoped: collect specified applicant fields, call the MOVA plugin tool, surface AI score and options to a human reviewer, and record an audit. The instructions do not direct the agent to read arbitrary local files, harvest unrelated environment variables, or transmit data to unexpected endpoints. It does rely on the MOVA plugin to perform network calls and credential handling.
Install Mechanism
This is an instruction-only skill (no install spec, no code files) so nothing is written to disk by the skill itself. The SKILL.md references installing the openclaw-mova plugin, but the skill does not itself perform downloads—risk is limited to whatever the referenced plugin does.
Credentials
The skill declares no environment variables or credentials itself; network calls and credentials are expected to be managed by the openclaw-mova plugin. This is reasonable, but the skill does transmit personal and financial data to external services (MOVA API, bureaus), so users must ensure the plugin is configured securely and that any API keys/credentials the plugin requires are appropriate and limited.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not claim to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but that is expected for an agent-invokable workflow.
Assessment
This skill appears coherent for submitting loan applications to a MOVA human-in-the-loop scoring workflow, but it depends on the openclaw-mova plugin to perform API calls and hold credentials. Before installing or using it: (1) review the openclaw-mova plugin code/docs and confirm where API keys are stored and what privileges it needs; (2) verify MOVA (api.mova-lab.eu) and any credit-bureau connectors meet your data-protection and regulatory requirements (EU hosting, retention, access controls); (3) ensure you have lawful basis/consent to send applicant financial data; (4) test with non-production/dummy data first; and (5) confirm audit storage, retention, and who can access audit receipts.Like a lobster shell, security has layers — review code before you run it.
latestvk976npan3hmswkyfqaggnz979d8429j0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.