中文 EN

Scan Report

Scan New Files

⚠ Low Risk — Risk Score 15/100
Last scan:21 hr ago Rescan
15 /100
ai-intelligent-budget-management
企业预算编制与执行跟踪，智能预警
This skill package contains only documentation/metadata with no implementation code, making it a placeholder or incomplete skill with minimal security surface.
Skill Nameai-intelligent-budget-management
Duration28.6s
Enginepi
✓
Safe to install
This skill cannot be evaluated for runtime security as it contains no executable code. If this is intended as a functional skill, implementation scripts must be added before deployment.

Findings 2 items

Severity Finding Location
Low
Incomplete Skill Package Doc Mismatch
SKILL.md references a git repository and execution commands but no actual implementation code exists in this package. The skill appears to be a placeholder or incomplete submission.
git clone https://github.com/openclaw-skills/ai-intelligent-budget-management
→ If this is a functional skill, include the actual Python/JS implementation files, requirements.txt, and app.py as referenced in the documentation.
 SKILL.md:26
Low
No allowed-tools Declaration Priv Escalation
The skill.json does not declare required permissions or allowed-tools mapping, making it impossible to determine what system resources this skill intends to access.
{...}
→ Add an allowed-tools section mapping required permissions (e.g., filesystem:READ, shell:WRITE) to enable proper security review.
 skill.json:1
ResourceDeclaredInferredStatusEvidence
Filesystem NONE NONE — No code files present to analyze
Network NONE NONE — No code files present to analyze
Shell NONE NONE — No code files present to analyze
Environment NONE NONE — No code files present to analyze
Skill Invoke NONE NONE — No code files present to analyze
Clipboard NONE NONE — No code files present to analyze
Browser NONE NONE — No code files present to analyze
Database NONE NONE — No code files present to analyze

File Tree

2 files · 1.3 KB · 62 lines
Markdown 1f · 51L JSON 1f · 11L
├─ 📋 skill.json JSON 11L · 319 B
└─ 📝 SKILL.md Markdown 51L · 1.0 KB

Security Positives

✓ No malicious code present - skill contains no executable files
✓ No sensitive file access detected
✓ No network communication code present
✓ No credential harvesting code present
✓ No obfuscation techniques observed
✓ No supply chain dependencies to audit