Ai Intelligent Expense Management

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a sparse, instruction-only finance app description; the main thing to notice is that its setup points to external code not included in the reviewed artifacts.

This skill appears to be a basic description for an enterprise expense-management app rather than a complete reviewed implementation. Treat the finance workflow as potentially sensitive, and only run the GitHub setup commands after independently checking the repository and dependencies.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user follows the setup commands, they may run code and dependencies from a repository that were not part of this artifact review.

Why it was flagged

The skill provides user-directed setup commands that fetch and run external code, while the reviewed package itself contains no app.py or requirements.txt for review.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-expense-management
cd ai-intelligent-expense-management
pip install -r requirements.txt
python app.py

Recommendation

Before installing or running the referenced repository, review its source code, dependency list, ownership, and recent changes.