Ai Intelligent Ar Vr Platform

AR/VR 应用开发平台，沉浸式体验。

Security Scan

The skill's description is plausible for an AR/VR platform, but its runtime instructions tell the agent to fetch and execute code from an external GitHub repo even though the skill provides no install spec or packaged code — this is inconsistent and risky.

Purpose & Capability

The name/description match an AR/VR development platform (Python/FastAPI, Unity, ARKit/ARCore). However, the skill declares no required binaries, env vars, or install spec while the SKILL.md lists a full clone/build/run workflow — a mismatch between declared requirements and what the instructions actually expect.

Instruction Scope

SKILL.md instructs the agent (and the user) to git clone https://github.com/openclaw-skills/ai-intelligent-ar-vr-platform, pip install -r requirements.txt, and run python app.py. Because the skill bundle contains no code, these instructions cause the agent/environment to fetch and execute arbitrary external code at runtime — a scope expansion that is not contained within the skill package and potentially unsafe.

Install Mechanism

There is no formal install spec in the registry metadata, yet the instructions rely on git cloning and running code from a GitHub repo. While GitHub is a common host, dynamically downloading and executing an external repository (extract/execute) without a vetted release or checksum is a high-risk install pattern for an instruction-only skill.

Credentials

The skill declares no required environment variables or primary credential, which is appropriate on the surface. However, because the instructions install and run third-party code, that fetched code could in turn request credentials or access unrelated environment data — the skill itself doesn't declare these needs, creating a hidden risk.

Persistence & Privilege

The skill is not marked always:true and does not request persistent agent-level privileges. It also does not declare modifications to other skills or system-wide settings. Autonomous invocation is allowed by default (disable-model-invocation: false), which is normal and should be considered together with other risks.

What to consider before installing

This skill's manifest contains no code, but its SKILL.md tells you to clone and run an external GitHub repository — that means installing and executing code you did not receive with the skill. Before installing or running it, inspect the referenced GitHub repo (read all files, setup scripts, requirements.txt), verify the repository owner and recent commits, and prefer running it in an isolated environment (VM/container) with no sensitive credentials mounted. Ask the publisher to include a formal install specification (signed release or commit hash) and to declare any required credentials. If you cannot verify the repo contents or do not want to run arbitrary code, avoid installing this skill.

AI 智能AR/VR平台

描述

AR/VR 应用开发平台，沉浸式体验。

功能

• AR应用（增强现实）
• VR应用（虚拟现实）
• 3D场景（场景构建）
• 交互设计（手势识别）
• 多人协作（协同体验）

定价

• 基础版：¥299/月（1 个项目）
• 专业版：¥1499/月（10 个项目）
• 企业版：¥4999/月（无限项目）

适用场景

• 游戏开发
• 教育培训
• 房地产展示
• 工业仿真

技术栈

• Python + FastAPI
• Unity/Unreal
• ARKit/ARCore
• 手势识别

安装

git clone https://github.com/openclaw-skills/ai-intelligent-ar-vr-platform
cd ai-intelligent-ar-vr-platform
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team