Football Data

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a purpose-aligned football data helper, with the main caution being that it asks users to install an external CLI package.

Before installing, verify that you trust the sports-skills package or GitHub repository. The skill otherwise appears limited to retrieving public football data and does not ask for API keys or sensitive local access.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the CLI could run third-party package code on the user's machine.

Why it was flagged

The skill relies on installing an external CLI package, including an unpinned GitHub fallback. This is coherent with the football-data purpose, but it means the user is trusting third-party code outside the reviewed artifacts.

Skill content

which sports-skills || pip install sports-skills ... pip install git+https://github.com/machina-sports/sports-skills.git

Recommendation

Install only if you trust the sports-skills package and repository; prefer a pinned, reviewed version in a controlled Python environment.