companies-house-cli
v0.3.1UK Companies House CLI — search companies, profiles, officers, filings, PSC, charges, insolvency, and agent-friendly JSON output aligned with rail-cli and tf...
⭐ 0· 113·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the requested binary ('ch') and the declared primary credential (COMPANIES_HOUSE_API_KEY). The requested binary and API key are appropriate for a Companies House CLI.
Instruction Scope
SKILL.md only instructs the agent to run the 'ch' CLI with subcommands and flags, describes expected JSON envelopes and exit codes, and tells the user how to supply the Companies House API key; it does not direct reading unrelated files, exfiltration, or access to other system credentials.
Install Mechanism
Install uses an npm package (@shan8851/companies-house-cli) that creates the 'ch' binary — this is expected for a Node-based CLI but carries the usual moderate risk of npm packages (arbitrary install/run scripts).
Credentials
Only COMPANIES_HOUSE_API_KEY is declared as the primary credential and is justified by the CLI's need to authenticate to the Companies House API; no unrelated secrets or config paths are requested.
Persistence & Privilege
Skill is not always-enabled and is user-invocable; it does not request elevated or persistent privileges beyond normal operation and does not modify other skills or system-wide agent settings.
Assessment
This skill appears coherent for accessing Companies House data. Before installing: verify the npm package publisher and review the package source (or install in a sandbox), pin a specific package version, and avoid placing your COMPANIES_HOUSE_API_KEY in broadly shared environments. Remember npm packages can run scripts at install time — if you cannot audit the package, consider running it in an isolated environment. Note: the agent can invoke the skill autonomously by default, so keep your API key limited in scope and monitor usage (rate limit ~600 requests/5 minutes).Like a lobster shell, security has layers — review code before you run it.
latestvk97bsnzq6cw4jwbnczt8vqfxp983j294
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏛️ Clawdis
Binsch
Primary envCOMPANIES_HOUSE_API_KEY
Install
Install companies-house-cli (npm)
Bins: ch
npm i -g @shan8851/companies-house-cli