competitive-intel

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a legitimate Bright Data-based market research helper, but it requires an external CLI/login and will send research queries to that service.

Before installing, confirm you are comfortable installing Bright Data’s CLI, logging into a Bright Data account, and letting the agent run billable web-research commands. For larger reports, set a clear scope and ask for confirmation of the number of planned bdata calls.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the prerequisite can execute code from Bright Data’s server on the user’s machine.

Why it was flagged

The skill asks the user to install a remote CLI installer script, but the installer contents, version, and integrity pinning are not included in the artifacts.

Skill content
curl -fsSL https://cli.brightdata.com/install.sh | bash
Recommendation

Install Bright Data CLI only from Bright Data’s official documentation, review the installer if possible, and avoid running it with unnecessary privileges.

What this means

Using the skill may send multiple scraping/search requests and incur Bright Data usage costs.

Why it was flagged

The skill directs the agent to run external CLI commands for each request and to parallelize calls, which is expected for live competitive research but can create billable network activity.

Skill content
For every competitive intelligence request... Gather live data — Run `bdata` commands. Parallelize independent calls.
Recommendation

Ask the agent to confirm scope, target sites, and approximate number of bdata calls before larger or recurring research tasks.

What this means

The agent’s research actions may run under the user’s Bright Data account and may affect that account’s usage or billing.

Why it was flagged

The skill requires a Bright Data account/session for the CLI, even though the registry metadata does not declare a primary credential.

Skill content
One-time login completed:
   ```bash
   bdata login
   ```
Recommendation

Use an appropriately scoped Bright Data account, monitor usage, and set account-side limits where available.

What this means

Business research topics and competitor targets may be shared with Bright Data as part of normal operation.

Why it was flagged

The documented workflow sends company names, search terms, URLs, and related research targets to the Bright Data CLI/provider.

Skill content
bdata search "[company name] linkedin company" --json
Recommendation

Avoid including confidential internal strategy, nonpublic customer data, or sensitive credentials in research queries unless the provider relationship and privacy terms are acceptable.