Ai Intelligent Knowledge Qa

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a descriptive knowledge-QA skill, but its setup instructions point users to clone and run external code that is not included in the reviewed package.

This skill’s description is coherent and no malicious behavior is visible in the included files. Treat the GitHub clone/install/run commands as outside the reviewed package: check that repository and its dependencies carefully before using it, especially if you plan to connect GPT, Web, WeChat, or API channels.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

A user who follows the setup instructions may install dependencies and run an application that was not part of this review.

Why it was flagged

The reviewed package does not include this repository's code, requirements file, or app.py, so following the documented setup would run external code outside the submitted artifacts.

Skill content

git clone https://github.com/openclaw-skills/ai-intelligent-knowledge-qa
cd ai-intelligent-knowledge-qa
pip install -r requirements.txt
python app.py

Recommendation

Before running the setup commands, inspect the referenced repository, requirements file, and application code, and verify the publisher/provenance.