Clinicaltrials Gov Parser
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to query the public ClinicalTrials.gov API as described, but it requires running local Python code and installing unpinned Python packages.
Before installing, review the Python script and requirements, use a virtual environment, and avoid submitting confidential competitive-intelligence queries if you do not want them sent to ClinicalTrials.gov. No evidence of credential use, persistence, or destructive behavior was found.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Sponsor names, conditions, keywords, or NCT IDs entered for searches may be sent to ClinicalTrials.gov.
The tool makes outbound HTTPS requests to ClinicalTrials.gov using search parameters; this is disclosed and central to the stated trial-monitoring purpose.
BASE_URL = "https://clinicaltrials.gov/api/v2" ... response = self.session.get(url, params=params, timeout=30)
Use only search terms you are comfortable sending to the public ClinicalTrials.gov API.
Installing or using the skill may run local Python code on the user's machine or agent environment.
The documented workflow includes running a local Python script. This is expected for the skill's implementation, but it is still local code execution.
python scripts/main.py search --sponsor "Pfizer" --condition "Diabetes"
Review the script before use and run it with normal user permissions, ideally in a virtual environment.
Dependency behavior could change if newer package versions are installed later.
The Python dependencies are not version-pinned, so installation may resolve different package versions over time.
dataclasses\nrequests
Pin and audit dependency versions before using this in a controlled or production workflow.
