Ai Intelligent Fraud Detection

PassAudited by ClawScan on May 1, 2026.

Overview

The provided skill is mostly a setup/marketing description with no included code; nothing malicious is shown, but users should verify the external repository before running it.

This skill does not contain reviewed implementation code. Before installing, confirm that the GitHub repository is trustworthy, review its dependencies, and do not provide real transaction or identity data until you understand how the external app stores, processes, and protects it.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user follows the setup commands, they will run code and install dependencies that were not part of this review.

Why it was flagged

The skill instructs users to fetch dependencies and run Python code from an external repository that is not included in the reviewed artifacts.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-fraud-detection
cd ai-intelligent-fraud-detection
pip install -r requirements.txt
python app.py

Recommendation

Inspect the referenced repository and requirements file, use a virtual environment, and avoid running it with sensitive data until provenance is verified.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

Users may over-trust the skill or the external repository if they assume it is officially maintained.

Why it was flagged

The SKILL.md uses an official-sounding author line, while the provided registry information says the source is unknown and skill.json lists a different author.

Skill content

作者：OpenClaw Skills Team

Recommendation

Verify the publisher and repository ownership before installing or using it for fraud, transaction, or identity-related workflows.