Open Data Integrator

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to be a coherent open-data construction analytics helper; its file/network access and optional API-key pattern are expected for that purpose but worth noticing.

This looks safe to use for construction open-data analysis. Before installing, confirm you are comfortable granting file and network access, provide only the project files needed, and use limited provider API keys if you choose to connect to an external data service.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read or write local project datasets and contact external open-data services when performing analyses.

Why it was flagged

The skill declares access to local files and the network. This is aligned with its data-integration purpose, but it is still broad enough that users should ensure only intended files and data sources are used.

Skill content
"permissions": [
    "filesystem",
    "network"
  ]
Recommendation

Use project-specific paths, review any exports, and avoid providing sensitive files unless they are needed for the analysis.

What this means

If a user supplies an API key for a data provider, that key gives access to the corresponding provider account or quota.

Why it was flagged

The documentation includes optional provider API-key handling for connectors such as weather data. This is expected for open-data integrations and no hardcoded, logged, or unrelated credential use is shown.

Skill content
api_key_required: bool = False ... def __init__(self, api_key: Optional[str] = None):
Recommendation

Use a least-privilege API key for the specific provider and do not include unrelated credentials in project data files.