Ai Intelligent Access Control

PassAudited by ClawScan on May 18, 2026.

Overview

This is an instruction-only access-control skill with no bundled code, but users should notice that it describes sensitive door/biometric permissions and points to unreviewed external install commands.

Before installing or following the GitHub setup commands, verify the external code and dependencies. If you plan to use it with real door controllers, face data, ID cards, or access logs, make sure an authorized administrator approves the deployment and that privacy, audit, and rollback controls are in place.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If this were deployed, it could affect who can enter physical spaces and how identity records are handled.

Why it was flagged

The skill explicitly describes biometric/card identity and access-permission management. That is purpose-aligned for a door-access product, but it is sensitive and high-impact if connected to real systems.

Skill content
- 人脸识别(刷脸通行)
- 刷卡管理(IC卡/身份证)
- 权限管理(分级授权)
Recommendation

Use only with explicit authorization from the access-control system owner, and verify permission scopes, audit logging, privacy handling, and rollback procedures before connecting it to real doors or identity records.

What this means

Running those commands would execute code and dependencies outside the reviewed package.

Why it was flagged

The packaged skill contains no code or install spec, but the README-style instructions direct the user to fetch dependencies and run an external application that was not included in the scanned artifacts.

Skill content
git clone https://github.com/openclaw-skills/ai-intelligent-access-control
cd ai-intelligent-access-control
pip install -r requirements.txt
python app.py
Recommendation

Review the referenced repository and dependencies, pin versions, and test in an isolated environment before running the application, especially because it relates to physical access control.