Ai Intelligent Attendance Management

考勤管理，打卡 + 请假 + 统计。

Security Scan

The skill's description matches an attendance-management tool, but the runtime instructions tell users/agents to clone and run an external GitHub repo and pip-install arbitrary requirements — a disproportionate install/runtime risk given there is no bundled code to inspect here.

Purpose & Capability

Name, description, and SKILL.md content all describe an attendance management system (clock-in, leave, stats). The declared requirements (none) are consistent with a small instruction-only skill, but functionality claims imply a standalone app.

Instruction Scope

SKILL.md instructs to run: git clone https://github.com/openclaw-skills/ai-intelligent-attendance-management; pip install -r requirements.txt; python app.py. These commands fetch and execute external code and install dependencies not included in the packaged skill. That grants the installer broad discretion and potential for fetching malicious packages or running undesired network/system actions.

Install Mechanism

There is no install spec in the registry; the only install path is the SKILL.md's GitHub clone + pip install approach. Downloading/executing code from an external repository and installing whatever is listed in requirements.txt is a high-risk install pattern because the repository contents and dependency list are not provided or vetted in this package.

Credentials

The packaged skill requests no environment variables or credentials, which is proportionate. However, the external app it instructs you to clone/run could request or read credentials at runtime (not visible here). Absence of declared env requirements does not guarantee the external code is benign.

Persistence & Privilege

Skill is not always-enabled, has no special persistence or config path requirements, and does not claim to modify other skills or global agent settings.

What to consider before installing

This skill is suspicious because it contains no code but tells you to clone and run an external GitHub repository and pip-install its dependencies. Do not run those commands blindly. Before installing: - Inspect the GitHub repository and its commit history to verify the author and contents. - Review requirements.txt for risky dependencies (packages that execute code during install or are poorly maintained). - Read app.py and any server code to see what network calls, credential reads, or data exfiltration it might perform. - If you must test it, run in an isolated sandbox or VM without access to sensitive environment variables or production systems. - Prefer skills that include their code in the package or provide a vetted release URL. Ask the publisher for provenance and a packaged release if you need higher assurance.

AI 智能考勤管理系统

描述

考勤管理，打卡 + 请假 + 统计。

功能

• 打卡管理（多种方式）
• 请假审批（流程审批）
• 考勤统计（自动统计）
• 异常处理（自动提醒）
• 薪资关联（考勤工资）

定价

• 基础版：¥49/月（50 人）
• 专业版：¥199/月（500 人）
• 企业版：¥799/月（无限人数）

适用场景

• 企业考勤
• 工时管理
• 薪资计算
• 人事管理

技术栈

• Python + FastAPI
• 打卡集成
• 审批流程
• 统计分析

安装

git clone https://github.com/openclaw-skills/ai-intelligent-attendance-management
cd ai-intelligent-attendance-management
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team