Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai Intelligent Fraud Detection

反欺诈检测,交易风控 + 身份验证。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 33 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description claim a complete AI fraud-detection system; however the packaged skill contains no runnable code and instead tells the user/agent to git clone a separate GitHub repo. Calling out/launching external software could be legitimate but is not proportional to an instruction-only skill that otherwise provides no implementation or provenance.
!
Instruction Scope
SKILL.md instructs cloning https://github.com/openclaw-skills/ai-intelligent-fraud-detection, pip installing dependencies, and running python app.py. Those steps cause the agent/operator to download and execute arbitrary remote code not included in the skill, which expands runtime scope beyond the declared package and could execute any system actions or exfiltrate data.
!
Install Mechanism
No install spec in the registry, but the runtime instructions require fetching code from GitHub and running pip install -r requirements.txt. While GitHub is a common host, fetching and executing code at runtime without bundled sources or pinned releases increases risk (unknown repo owner, unknown commit/branch, unknown dependencies).
Credentials
The skill declares no required environment variables or credentials, which is consistent on its face. However, the external code it directs you to run may request secrets or network access at runtime; that possibility is not documented in the SKILL.md and therefore not proportionate to the minimal declared requirements.
Persistence & Privilege
The skill does not request always:true, nor does it declare modifications to agent/system configs. It relies on the operator to run an external service, so it does not itself request elevated or persistent platform privileges.
What to consider before installing
This skill is an instruction-only wrapper that tells you to git clone and run a GitHub project that is not bundled with the skill. Before installing or running it: (1) verify the GitHub repository identity and review its code (especially app.py and requirements.txt) for malicious behavior; (2) prefer a packaged skill that includes its code or references a pinned release tag; (3) run the cloned project in a sandbox or isolated environment and inspect network calls and required credentials; (4) do not provide sensitive credentials until you confirm the repository's trustworthiness and understand why they are needed. If you want a safer evaluation, provide the GitHub repo URL/contents so the code can be reviewed.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
aivk9729gxwdsjq6xdrft5ry8ekn183vfs1latestvk9729gxwdsjq6xdrft5ry8ekn183vfs1securityvk9729gxwdsjq6xdrft5ry8ekn183vfs1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🤖 Clawdis

SKILL.md

AI 智能反欺诈系统

描述

反欺诈检测,交易风控 + 身份验证。

功能

  • 交易监控(实时监控)
  • 欺诈检测(模型识别)
  • 身份验证(多维验证)
  • 风险评分(实时评分)
  • 案件调查(调查工具)

定价

  • 基础版:¥499/月(1 万笔/月)
  • 专业版:¥2499/月(10 万笔/月)
  • 企业版:¥7999/月(无限笔)

适用场景

  • 金融风控
  • 电商反欺诈
  • 支付风控
  • 账号安全

技术栈

  • Python + FastAPI
  • 风控模型
  • 实时计算
  • 规则引擎

安装

git clone https://github.com/openclaw-skills/ai-intelligent-fraud-detection
cd ai-intelligent-fraud-detection
pip install -r requirements.txt
python app.py

创建:2026-03-13 作者:OpenClaw Skills Team

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…