Ai Intelligent Face Recognition

ReviewAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent face-recognition description, but users should verify the external code it tells them to clone and handle biometric face data carefully.

This appears to be an instruction-only face-recognition skill rather than a bundled implementation. Before installing, verify the external GitHub repository and dependencies, review how face images and extracted features are stored or deleted, and only use the system where biometric identification is authorized.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If used without clear authorization, the skill could support biometric identification or surveillance workflows.

Why it was flagged

The skill advertises biometric face search and identity/security use cases, which are sensitive and high-impact even though they match the stated purpose.

Skill content

- 人脸搜索（1:N搜索）
- 身份验证
- 安防监控
- VIP识别

Recommendation

Use only with consent and proper authorization, and require explicit user approval before applying it to identity, access-control, monitoring, or VIP-recognition decisions.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

A user who follows the setup will rely on code and dependencies that were not part of this artifact review.

Why it was flagged

The documentation points to an external repository and dependency file that are not included in the provided artifacts or install spec.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-face-recognition
cd ai-intelligent-face-recognition
pip install -r requirements.txt

Recommendation

Verify the repository owner, review the code and requirements file, and prefer a pinned commit or release before installing.

Low

#ASI05: Unexpected Code Execution

What this means

Running the app executes local code from the external repository.

Why it was flagged

The setup instructions tell the user to run a Python application. This is expected for the stated FastAPI-based face-recognition system and is presented as a user-directed install step.

Skill content

python app.py

Recommendation

Run it only after reviewing the source and dependencies, and use an isolated environment if possible.

Medium

#ASI06: Memory and Context Poisoning

What this means

Biometric face features may be sensitive if retained or reused across searches.

Why it was flagged

Face search and feature extraction commonly involve reusable biometric templates or embeddings, but the artifact does not describe storage, retention, or reuse controls.

Skill content

- 人脸搜索（1:N搜索）
- 特征提取

Recommendation

Before use, confirm where face images and extracted features are stored, how long they are kept, and who can access or reuse them.