Clinicaltrials Gov Parser

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: clinicaltrials-gov-parser Version: 0.1.0 The skill is a legitimate tool designed to monitor clinical trial data using the official ClinicalTrials.gov API v2. The core logic in `scripts/main.py` implements rate-limited GET requests to a hardcoded government endpoint (clinicaltrials.gov) and provides a CLI for searching and summarizing trial statuses. There is no evidence of data exfiltration, unauthorized file access, or malicious code execution; the 'High' risk level mentioned in `SKILL.md` appears to be a conservative self-assessment regarding standard network and script execution capabilities.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Sponsor names, conditions, keywords, or NCT IDs entered for searches may be sent to ClinicalTrials.gov.

Why it was flagged

The tool makes outbound HTTPS requests to ClinicalTrials.gov using search parameters; this is disclosed and central to the stated trial-monitoring purpose.

Skill content
BASE_URL = "https://clinicaltrials.gov/api/v2" ... response = self.session.get(url, params=params, timeout=30)
Recommendation

Use only search terms you are comfortable sending to the public ClinicalTrials.gov API.

What this means

Installing or using the skill may run local Python code on the user's machine or agent environment.

Why it was flagged

The documented workflow includes running a local Python script. This is expected for the skill's implementation, but it is still local code execution.

Skill content
python scripts/main.py search --sponsor "Pfizer" --condition "Diabetes"
Recommendation

Review the script before use and run it with normal user permissions, ideally in a virtual environment.

What this means

Dependency behavior could change if newer package versions are installed later.

Why it was flagged

The Python dependencies are not version-pinned, so installation may resolve different package versions over time.

Skill content
dataclasses\nrequests
Recommendation

Pin and audit dependency versions before using this in a controlled or production workflow.