Government Contracts & Federal Awards

• Outcome: Review
• Latest audit: Sep 16, 2026 · 9:40 AM UTC
• Version: 1.0.0

Overview

The skill is a simple paid government-contract lookup integration, but it can trigger automatic USDC wallet payments for external API calls without clear per-call confirmation or spend limits.

Review wallet controls before installing, especially spend limits and whether OpenClaw asks before each paid request. Avoid sending confidential client names, internal strategy keywords, or sensitive lead lists unless you are comfortable sharing those queries with the provider.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly states that the first HTTPS call will trigger an HTTP 402 and that the wallet will auto-pay and retry, but it does not require an explicit user confirmation at time of spend. This creates a real risk of unintended financial loss, especially if an agent invokes the tool automatically, repeatedly, or based on attacker-influenced prompts.

External Transmission

Medium

• Category: Data Exfiltration

Content

## Tools
| Call | What you get | Price |
|---|---|---|
| `GET https://api.gocreativeai.com/v1/finance/gov-awards/{company}` | Largest US federal contract awards to a recipient | ~$0.05 |
| `GET https://api.gocreativeai.com/v1/leads/federal-contracts/{keyword}` | Recent federal awards by keyword (recipient, amount) | ~$0.05 |
| `GET https://api.gocreativeai.com/v1/signal/govcon-radar/{keyword}` | Companies that **just won** federal contracts — sales-intent | ~$0.05 |

• Confidence: 88% confidence
• Finding: This endpoint sends the provided company value to an external third-party service. While external API use is expected for this skill, transmitting user- or agent-supplied data off-platform can expose sensitive research targets, internal lead lists, or proprietary queries if users are not warned and inputs are not constrained.

External Transmission

Medium

• Category: Data Exfiltration

Content

| Call | What you get | Price |
|---|---|---|
| `GET https://api.gocreativeai.com/v1/finance/gov-awards/{company}` | Largest US federal contract awards to a recipient | ~$0.05 |
| `GET https://api.gocreativeai.com/v1/leads/federal-contracts/{keyword}` | Recent federal awards by keyword (recipient, amount) | ~$0.05 |
| `GET https://api.gocreativeai.com/v1/signal/govcon-radar/{keyword}` | Companies that **just won** federal contracts — sales-intent | ~$0.05 |

## Why GoCreative

• Confidence: 88% confidence
• Finding: This endpoint transmits keyword queries to an external service, which may reveal internal procurement interests, market strategy, or customer research topics. The risk is heightened because the skill is designed for sales-intent and competitor tracking, so the queries themselves may be commercially sensitive even if the returned data is public.

External Transmission

Medium

• Category: Data Exfiltration

Content

|---|---|---|
| `GET https://api.gocreativeai.com/v1/finance/gov-awards/{company}` | Largest US federal contract awards to a recipient | ~$0.05 |
| `GET https://api.gocreativeai.com/v1/leads/federal-contracts/{keyword}` | Recent federal awards by keyword (recipient, amount) | ~$0.05 |
| `GET https://api.gocreativeai.com/v1/signal/govcon-radar/{keyword}` | Companies that **just won** federal contracts — sales-intent | ~$0.05 |

## Why GoCreative
Live US federal procurement data (USAspending), pay-per-call, no signup — the **only native govcon feed for agents**.

• Confidence: 90% confidence
• Finding: This endpoint sends govcon-radar keyword searches to an external service, potentially exposing highly sensitive sales-intent or competitor-monitoring interests. In this skill's context, the transmitted search terms can themselves disclose business strategy, making external transmission materially relevant even though the service purpose is legitimate.

Static analysis

No suspicious patterns detected.