Open Data Hub Cli

PassAudited by ClawScan on May 15, 2026.

Overview

This skill is coherent for querying public Open Data Hub data, with the main caution being that setup may install an external CLI, including an optional unpinned remote install script.

This appears appropriate for public Open Data Hub queries. Before installing, be aware that it depends on an external odh CLI and that the documented curl-to-shell installer should only be used if you trust the GitHub source; otherwise use the pinned Go/OpenClaw install path.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user or agent follows that optional setup path, it will trust and run whatever the remote install script serves at that time.

Why it was flagged

The skill documents an optional remote shell installer from the GitHub main branch. This is a common setup pattern, but it executes code not included in the submitted artifacts and is less reproducible than the declared pinned Go module installer.

Skill content

curl -fsSL https://raw.githubusercontent.com/galjos/odh-cli/main/scripts/install.sh | sh

Recommendation

Prefer the OpenClaw offered installer or a pinned release/module when possible, and inspect the remote install script before piping it to a shell.