Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ai Intelligent Expense Management

企业费用管理,报销 + 控制 + 分析。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 40 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name, description, and SKILL.md consistently describe an expense-management application (报销、审批、预算、分析). However the SKILL.md's recommended install steps require git, pip, and python at runtime even though the skill metadata lists no required binaries — this mismatch is unexplained.
Instruction Scope
The SKILL.md contains only a high-level feature description and simple install/run commands (git clone, pip install, python app.py). It does not instruct the agent to read arbitrary host files, exfiltrate data, or access unrelated environment variables.
!
Install Mechanism
There is no formal install spec in the registry; instead the README tells users to git clone a GitHub repo and run its code. While GitHub is a common host, the instructions do not pin a commit/tag or use a verified release, and running app.py after installing requirements will execute whatever code is in that repo — a supply-chain risk.
Credentials
The skill declares no required environment variables or credentials and the SKILL.md does not request secrets. That is proportionate for a description-only skill, but the actual app (if installed) may later require DB/API credentials — which are not mentioned here.
Persistence & Privilege
The skill is not forced-always and allows user invocation; it does not request elevated platform privileges or claim to modify other skills or agent-wide settings.
What to consider before installing
This skill appears to be what it says (an expense-management app) but be cautious: the SKILL.md tells you to git clone and run code from GitHub without pinning a release or declaring required binaries (git, python, pip). Before installing or running it, review the GitHub repository contents and commit history, inspect requirements.txt for risky packages, run the app in a sandbox or isolated environment, and prefer a pinned tag/commit or an official release. If you plan to give it credentials (database, cloud), only do so after auditing the code or using least-privilege test credentials.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9734kya52bbyz5r9z6fq07fg9834vf6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🤖 Clawdis

SKILL.md

AI 智能费用管理系统

描述

企业费用管理,报销 + 控制 + 分析。

功能

  • 费用申请(在线申请)
  • 审批流程(多级审批)
  • 预算控制(超预算提醒)
  • 费用分析(统计分析)
  • 对账管理(自动对账)

定价

  • 基础版:¥99/月(50 人)
  • 专业版:¥499/月(500 人)
  • 企业版:¥1999/月(无限人数)

适用场景

  • 企业费用管理
  • 差旅费用
  • 办公费用
  • 预算控制

技术栈

  • Python + FastAPI
  • 审批流程
  • 预算控制
  • 数据分析

安装

git clone https://github.com/openclaw-skills/ai-intelligent-expense-management
cd ai-intelligent-expense-management
pip install -r requirements.txt
python app.py

创建:2026-03-13 作者:OpenClaw Skills Team

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…