Ai Intelligent Report Generator

PassAudited by ClawScan on May 1, 2026.

Overview

No malicious behavior is evident, but users should review the external GitHub install path and any automated email-sending setup before use.

Before installing, review the referenced GitHub repository and its dependencies because the runnable code is not included in the scanned package. If you use email or scheduled sending, confirm the data sources, recipients, schedule, credentials, and whether each report should require approval before being sent.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user follows these setup commands, they would run code outside the scanned artifact package.

Why it was flagged

The provided package is instruction-only, but the documentation points users to fetch dependencies and run code from an external repository that is not included in the reviewed artifacts.

Skill content
git clone https://github.com/openclaw-skills/ai-intelligent-report-generator
cd ai-intelligent-report-generator
pip install -r requirements.txt
python app.py
Recommendation

Inspect the referenced repository and requirements before running them, prefer a pinned commit or release, and run only in an environment appropriate for unreviewed application code.

What this means

Misconfigured automatic sending could deliver reports, including potentially sensitive business or financial reports, to unintended recipients.

Why it was flagged

The skill advertises scheduled automatic sending and email integration, which is purpose-aligned for reports but should have clear recipient, schedule, and approval controls.

Skill content
- 定时发送(自动发送)
...
- 邮件集成
Recommendation

Use explicit recipient lists, review schedules, and require user approval before enabling automatic email delivery for sensitive reports.