Ai Intelligent Behavior Analysis

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: ai-intelligent-behavior-analysis Version: 1.0.0 The skill bundle contains only metadata and documentation for an AI behavior analysis system. It lacks any executable code or suspicious instructions. The installation steps in SKILL.md point to a standard GitHub repository (openclaw-skills/ai-intelligent-behavior-analysis), and there are no signs of prompt injection, data exfiltration, or malicious intent in the provided files.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing from the README would rely on code and dependencies that were not included in the reviewed artifact set.

Why it was flagged

The reviewed package contains no code, lockfile, or install specification; setup depends on fetching an external repository and installing its dependencies. This is disclosed and user-directed, but users should verify the repository before running it.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-behavior-analysis
cd ai-intelligent-behavior-analysis
pip install -r requirements.txt

Recommendation

Review the GitHub repository, pin a trusted commit or release, and inspect requirements before installing.

Note

ASI05: Unexpected Code Execution

What this means

A user who follows the setup will execute local Python code from the external project.

Why it was flagged

The skill explicitly tells the user to start a Python application from the downloaded repository. Running an app is expected for the stated video-analysis service, and the artifact does not show automatic or hidden execution.

Skill content

python app.py

Recommendation

Run it only in an environment you trust after reviewing the downloaded code and dependencies.

Note

ASI09: Human-Agent Trust Exploitation

What this means

Users may assume the package is officially maintained when the supplied artifacts do not consistently establish that provenance.

Why it was flagged

SKILL.md presents an official-looking author label, while the supplied source is unknown and skill.json lists a different author. This provenance inconsistency is not proof of deception, but it should temper trust in the install instructions.

Skill content

作者：OpenClaw Skills Team

Recommendation

Confirm the maintainer and repository ownership before installing or paying for the service.