Ai Intelligent Alerting System

• Risk level: Low
• Analyzed: May 1, 2026, 7:17 AM
• Findings: 1
• Version: 1.0.3

Overview

The skill itself is only a brief alerting-system description, but its setup instructions ask users to clone and run external Python code that is not included in the submitted artifact.

This looks benign as submitted, but before installing, review the GitHub repository and Python dependencies referenced in the README-style instructions, and run them in an isolated environment if possible.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

Note

What this means

Copying the setup commands would install and run code from an external repository on the user's machine.

Why it was flagged

The documented setup relies on external repository contents and Python dependencies that are not part of the submitted artifact. This appears purpose-aligned and user-directed, but users should verify the repository and dependencies before running them.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-alerting-system
cd ai-intelligent-alerting-system
pip install -r requirements.txt
python app.py

Recommendation

Inspect the referenced repository and requirements file, prefer a virtual environment, and only run the app if the source and dependencies are trusted.