Ai Intelligent Knowledge Qa

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: ai-intelligent-knowledge-qa Version: 1.0.0 The skill bundle contains only metadata and documentation (SKILL.md) describing an AI-driven knowledge QA system. It outlines standard features, pricing, and installation procedures without any executable code, suspicious network requests, or prompt injection attempts targeting the agent.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing it would require trusting code and dependencies from the referenced repository rather than only the reviewed skill artifact.

Why it was flagged

The documented setup relies on an external repository, dependencies, and application code that are not included in the submitted artifact set.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-knowledge-qa
cd ai-intelligent-knowledge-qa
pip install -r requirements.txt
python app.py

Recommendation

Review the linked repository, requirements file, and app code before running the install commands, and prefer pinned dependencies from a trusted source.

Note

ASI06: Memory and Context Poisoning

What this means

Knowledge added to the system may be reused in later answers, so inappropriate or sensitive material could be surfaced in future responses.

Why it was flagged

The described design uses semantic search and a vector database, which commonly stores retrievable knowledge representations for later question answering.

Skill content

- 智能检索（语义搜索）
- AI 问答（GPT集成）
...
- 向量数据库

Recommendation

Only index approved knowledge sources, define retention and access rules, and avoid adding confidential material unless the deployment’s storage and retrieval controls are understood.