ai-intelligent-data-governance

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). These links point to an unknown domain (clawhub.ai) and an unverified GitHub repo that instructs users to clone and run Python code from an unfamiliar author—there's no clear trust signals (official vendor, large community, or verified releases), so executing code from them could be risky.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's install steps explicitly clone and execute code from https://github.com/openclaw-skills/ai-intelligent-data-governance (git clone ... then python app.py), so external code is fetched and run at runtime.