Ai Intelligent Employee Survey

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a simple employee-survey app description with no embedded code, but its manual setup points users to an external GitHub/Python app that should be reviewed before running.

This appears benign as a descriptive, instruction-only skill. Before installing or using it with employee survey responses, review the external GitHub project and dependencies, and verify the promised anonymity and privacy controls.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the external repository or dependencies differ from the reviewed artifact, the user could end up running code that was not represented in this skill package.

Why it was flagged

The setup instructions ask the user to download and run code and dependencies from an external repository not included in the submitted artifact set. This is user-directed and aligned with deploying a web app, but users should verify the repository and dependency provenance before running it.

Skill content
git clone https://github.com/openclaw-skills/ai-intelligent-employee-survey
cd ai-intelligent-employee-survey
pip install -r requirements.txt
python app.py
Recommendation

Review the GitHub repository, requirements file, and app code before installation; prefer pinned dependencies and a trusted source.

What this means

Users might rely on the privacy claim before confirming whether employee responses are actually anonymized and protected.

Why it was flagged

The skill advertises anonymous surveys and privacy protection, but the provided artifact does not describe the anonymity mechanism, storage model, access controls, or retention policy. This is purpose-aligned, not deceptive on its own, but it is important because employee survey data can be sensitive.

Skill content
- 匿名调研(隐私保护)
Recommendation

Before using it for real employee data, confirm how responses are anonymized, stored, retained, and who can access reports.