Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai Intelligent Demand Forecasting

需求预测,销售预测 + 补货计划。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 25 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and declared functionality (demand/sales forecasting, replenishment) align with the SKILL.md content and tags. There are no unrelated environment variables, binaries, or config paths declared.
!
Instruction Scope
The SKILL.md instructs users/agents to git clone a GitHub repo and run pip install -r requirements.txt and python app.py. Because the skill package contains no code, these instructions cause the agent/user to fetch and execute third-party code at runtime — a scope expansion beyond the provided files and not reviewable from the packaged skill.
!
Install Mechanism
There is no install spec inside the package, but the instructions direct cloning from a GitHub repo and installing its dependencies. GitHub is a known host (lower risk than arbitrary URLs), but the repo is external and not bundled, so installing and executing it results in running unreviewed code from the network.
Credentials
The skill declares no required environment variables, credentials, or config paths. There are no obvious requests for unrelated secrets in the package itself. However, the external repo (if run) could later request secrets; that cannot be assessed from the packaged files.
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It is user-invocable and allows normal autonomous invocation, which is the platform default and not itself a concern here.
What to consider before installing
This skill package contains only instructions and no code; following them will clone and execute an external GitHub repository (pip install + python app.py). Before running anything: (1) obtain and inspect the referenced GitHub repository and review its requirements.txt and app.py for network calls, credential usage, or dangerous shell commands; (2) run the code in an isolated sandbox or VM; (3) verify the repository's trustworthiness (owner, commits, signed releases); (4) check whether the app will request or log any credentials or private data; and (5) prefer a skill that includes its code in the package or links to a specific tagged release rather than a generic repo URL. If you cannot review the external repo yourself, treat this skill as potentially unsafe.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
aivk97bgyy8fv5bvt74s23yxtwb6x83taw2analyticsvk97bgyy8fv5bvt74s23yxtwb6x83taw2latestvk97bgyy8fv5bvt74s23yxtwb6x83taw2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🤖 Clawdis

SKILL.md

AI 智能需求预测系统

描述

需求预测,销售预测 + 补货计划。

功能

  • 销售预测(AI预测)
  • 季节分析(季节因子)
  • 促销影响(促销调整)
  • 补货计划(自动补货)
  • 预测准确率(误差分析)

定价

  • 基础版:¥299/月(100 SKU)
  • 专业版:¥1499/月(1000 SKU)
  • 企业版:¥4999/月(无限 SKU)

适用场景

  • 销售预测
  • 库存计划
  • 供应链
  • 零售预测

技术栈

  • Python + FastAPI
  • 时序预测
  • 机器学习
  • 误差分析

安装

git clone https://github.com/openclaw-skills/ai-intelligent-demand-forecasting
cd ai-intelligent-demand-forecasting
pip install -r requirements.txt
python app.py

创建:2026-03-13 作者:OpenClaw Skills Team

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…