Ai Intelligent Ai Model Marketplace

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is not overtly malicious, but it advertises high-impact model trading, deployment, and settlement while pointing users to run unreviewed external code outside the submitted package.

Treat this as an incomplete, high-impact marketplace skill. Before installing, verify the external GitHub repository and dependencies, run it only in a sandbox, and avoid using it for real model sales, deployments, payments, or settlements until its code and permission model are reviewed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user follows the setup instructions, they may execute code and install packages that were not reviewed with this skill.

Why it was flagged

The submitted package is instruction-only, so these commands fetch and run the actual application and dependencies from outside the reviewed artifacts.

Skill content
git clone https://github.com/openclaw-skills/ai-intelligent-ai-model-marketplace
cd ai-intelligent-ai-model-marketplace
pip install -r requirements.txt
python app.py
Recommendation

Inspect the referenced repository and dependencies before running them, prefer pinned dependencies or a lockfile, and run the app in a sandbox until the implementation is reviewed.

What this means

A user could assume the skill is safe for publishing, transactions, deployments, or settlements even though the reviewed instructions do not define safeguards.

Why it was flagged

These are high-impact marketplace, deployment, and settlement actions, but the artifact does not define approval requirements, transaction limits, rollback, or containment.

Skill content
- 模型上架(模型发布)
- 模型交易(在线交易)
- 模型部署(一键部署)
- 收益分成(自动结算)
Recommendation

Require explicit human confirmation for publishing, trading, deployment, and settlement actions, and document clear limits and recovery steps before using it for real accounts or infrastructure.

What this means

Real use may require sensitive marketplace, payment, or account access that is not described in the submitted metadata.

Why it was flagged

Online trading and automatic settlement normally involve account or payment privileges, but the artifacts do not show credential collection or misuse; this is a permission-boundary item to verify.

Skill content
- 模型交易(在线交易)
- 收益分成(自动结算)
Recommendation

Do not provide payment, account, or deployment credentials unless the implementation, scopes, and authorization flow are clearly documented and reviewed.