Ai Intelligent Asset Lifecycle

企业资产管理，采购 + 使用 + 报废。

Security Scan

The skill's description and functionality align, but the runtime instructions tell the user/agent to git-clone and run arbitrary code from GitHub (not bundled with the skill), which is disproportionate and risky without code review.

Purpose & Capability

Name, description, and listed features match an asset management app. However, the skill package contains no runtime code and instead instructs the user to clone and run an external GitHub repo — this is unexpected for an instruction-only skill and expands the scope beyond what the registry metadata contains.

Instruction Scope

SKILL.md's runtime instructions tell the operator to run: git clone https://github.com/openclaw-skills/ai-intelligent-asset-lifecycle; pip install -r requirements.txt; python app.py. Those steps direct execution of external code not included in the skill bundle, which could access system resources or exfiltrate data; the instructions give no guidance to audit or sandbox that code.

Install Mechanism

There is no formal install spec in the registry, but the README explicitly instructs cloning a GitHub repo and running pip install and python. Downloading and executing arbitrary repo code is high-risk unless the repo and its contents are trusted and reviewed.

Credentials

The skill declares no required environment variables, binaries, or config paths. There is no immediate mismatch between declared env requirements and the described functionality.

Persistence & Privilege

Flags are default (always: false, agent invocation enabled). The skill does not request persistent platform privileges in the manifest.

What to consider before installing

This skill appears to be a wrapper that points you to a GitHub repository and tells you to run its code. Do not git-clone and run app.py on production or on a machine with sensitive data without first: (1) inspecting the repository contents (especially app.py and requirements.txt), (2) reviewing third-party packages for malicious or unknown dependencies, (3) running the app in an isolated sandbox or VM, and (4) checking the repository owner and commit history for trustworthiness. If you need the functionality, ask the skill author for a vetted package or for the code to be bundled with the skill, and prefer running it in an environment where network access and credentials are restricted.

AI 智能资产生命周期系统

描述

企业资产管理，采购 + 使用 + 报废。

功能

• 资产登记（批量导入）
• 领用管理（领用申请）
• 资产盘点（定期盘点）
• 维修管理（维修记录）
• 报废处理（报废流程）

定价

• 基础版：¥99/月（500 资产）
• 专业版：¥499/月（5000 资产）
• 企业版：¥1999/月（无限资产）

适用场景

• 固定资产管理
• 设备管理
• IT 资产
• 办公资产

技术栈

• Python + FastAPI
• 资产管理
• 盘点系统
• 流程管理

安装

git clone https://github.com/openclaw-skills/ai-intelligent-asset-lifecycle
cd ai-intelligent-asset-lifecycle
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team