中文 EN

Scan Report

Scan New Files

✓ Low Risk — Risk Score 10/100
Last scan:21 hr ago Rescan
10 /100
ai-intelligent-demand-forecasting
需求预测，销售预测 + 补货计划。
Documentation-only skill with no executable code; no malicious behavior can be assessed as no implementation files exist.
Skill Nameai-intelligent-demand-forecasting
Duration27.1s
Enginepi
✓
Safe to install
This skill contains only a SKILL.md file with no scripts or implementation. Verify the actual repository at github.com/openclaw-skills/ai-intelligent-demand-forecasting before use to ensure it matches the documented functionality.

Findings 1 items

Severity Finding Location
Info
Dependencies not pinned in documentation Supply Chain
The SKILL.md shows 'pip install -r requirements.txt' without version pinning, which could lead to supply chain issues if the requirements.txt file contains unpinned dependencies.
pip install -r requirements.txt
→ If the actual repository exists, verify that dependencies are version-pinned to prevent dependency confusion attacks.
 SKILL.md:45
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No file operations in skill
Network NONE NONE — No network operations in skill
Shell NONE NONE — No shell commands in skill
Environment NONE NONE — No environment access in skill
Skill Invoke NONE NONE — No skill invocation in skill
Clipboard NONE NONE — No clipboard access in skill
Browser NONE NONE — No browser access in skill
Database NONE NONE — No database access in skill

File Tree

1 files · 974 B · 51 lines
Markdown 1f · 51L
└─ 📝 SKILL.md Markdown 51L · 974 B

Security Positives

✓ No executable code present - cannot contain malicious functionality
✓ No sensitive file access detected
✓ No credential harvesting mechanisms present
✓ No network exfiltration detected
✓ No obfuscated code detected
✓ No reverse shell or C2 infrastructure indicators