ai-intelligent-backup-automation

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These point to an unknown third‑party registry (clawhub.ai) and a small/unvetted GitHub repo that instructs cloning and running Python code—meaning they could distribute malicious code if the source isn't trusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The INSTALL instructions clone and then run code from the remote repository https://github.com/openclaw-skills/ai-intelligent-backup-automation (git clone ... then python app.py), meaning remote code is fetched and executed at runtime and is a required dependency.