Ai Intelligent Api Management

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a short instruction-only API-management description with no hidden code or credential use, but its setup asks users to clone and run external Python code not included in the review.

This appears benign as an instruction-only API-management skill. Before installing, verify the referenced GitHub repository and requirements file because the actual application code is not included in the reviewed artifacts.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing it as written would execute code from outside the reviewed skill package on the user's machine.

Why it was flagged

The setup directs users to fetch dependencies and run a Python app from a repository whose code is not part of the supplied artifacts. This is purpose-aligned for an API-management app, but users should review that external code before running it.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-api-management
cd ai-intelligent-api-management
pip install -r requirements.txt
python app.py

Recommendation

Only run the clone/install/start commands after checking the repository, dependency file, and app entry point; prefer pinned dependencies or an audited install package.