LegiScan Bill Search
Analysis
This skill appears to do what it says—search LegiScan bills—but users should notice that it needs a LegiScan API key, the requests library, and optional scheduled execution.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Dependencies: Requires `requests`.
The skill documents a Python package dependency, but the artifact set has no install specification. This is not suspicious by itself, but users must provide or verify the dependency themselves.
Run the script directly or via a scheduled task (cron).
The skill suggests optional recurring execution. The artifacts do not create a cron job automatically, so this is user-directed and purpose-aligned for monitoring.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
Set `LEGISCAN_API_KEY` in your environment.
The skill requires a service API key. This is expected for LegiScan access, but users should be aware that it is credentialed API usage and the registry metadata lists no primary credential or required env var.