LegiScan Bill Search

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says—search LegiScan bills—but users should notice that it needs a LegiScan API key, the requests library, and optional scheduled execution.

Before installing, confirm you are comfortable providing a LegiScan API key, installing the requests Python package, and sending your chosen state and keyword searches to LegiScan. Use scheduled execution only if you want recurring monitoring.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill will use the user's LegiScan API key to make LegiScan API requests.

Why it was flagged

The skill requires a service API key. This is expected for LegiScan access, but users should be aware that it is credentialed API usage and the registry metadata lists no primary credential or required env var.

Skill content
Set `LEGISCAN_API_KEY` in your environment.
Recommendation

Use a LegiScan key intended for this purpose and avoid sharing command output or logs if they might contain credential-related error details.

What this means

The skill may not run unless the requests package is already installed, and the package source/version is not pinned by these artifacts.

Why it was flagged

The skill documents a Python package dependency, but the artifact set has no install specification. This is not suspicious by itself, but users must provide or verify the dependency themselves.

Skill content
Dependencies: Requires `requests`.
Recommendation

Install requests from a trusted package index and, for stricter environments, pin a known-good version.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If scheduled, the script would continue making periodic LegiScan API requests until the user disables the schedule.

Why it was flagged

The skill suggests optional recurring execution. The artifacts do not create a cron job automatically, so this is user-directed and purpose-aligned for monitoring.

Skill content
Run the script directly or via a scheduled task (cron).
Recommendation

Only set up cron or another scheduler if ongoing monitoring is desired, and document how to disable it.