ai-intelligent-demand-forecasting 安全扫描报告 — 低风险 | ClawSafe

10 /100

ai-intelligent-demand-forecasting

需求预测，销售预测 + 补货计划。

Documentation-only skill with no executable code; no malicious behavior can be assessed as no implementation files exist.

技能名称ai-intelligent-demand-forecasting

分析耗时27.1s

引擎pi

✓

可以安装

This skill contains only a SKILL.md file with no scripts or implementation. Verify the actual repository at github.com/openclaw-skills/ai-intelligent-demand-forecasting before use to ensure it matches the documented functionality.

安全发现 1 项

严重性	安全发现	位置
提示	Dependencies not pinned in documentation 供应链 The SKILL.md shows 'pip install -r requirements.txt' without version pinning, which could lead to supply chain issues if the requirements.txt file contains unpinned dependencies. `pip install -r requirements.txt` → If the actual repository exists, verify that dependencies are version-pinned to prevent dependency confusion attacks.	`SKILL.md:45`

资源类型	声明权限	推断权限	状态	证据
文件系统	`NONE`	`NONE`	—	No file operations in skill
网络访问	`NONE`	`NONE`	—	No network operations in skill
命令执行	`NONE`	`NONE`	—	No shell commands in skill
环境变量	`NONE`	`NONE`	—	No environment access in skill
技能调用	`NONE`	`NONE`	—	No skill invocation in skill
剪贴板	`NONE`	`NONE`	—	No clipboard access in skill
浏览器	`NONE`	`NONE`	—	No browser access in skill
数据库	`NONE`	`NONE`	—	No database access in skill

目录结构

1 文件 · 974 B · 51 行

Markdown 1f · 51L

└─ 📝 SKILL.md Markdown 51L · 974 B

安全亮点

✓ No executable code present - cannot contain malicious functionality

✓ No sensitive file access detected

✓ No credential harvesting mechanisms present

✓ No network exfiltration detected

✓ No obfuscated code detected

✓ No reverse shell or C2 infrastructure indicators