Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Parliament CLI

v0.1.0

UK Parliament CLI — search bills, divisions, members, and written questions from official UK Parliament APIs, with stable JSON envelopes for agents. Use when...

0· 58·0 current·0 all-time
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name and description match the requested binary ('parliament') and the SKILL.md only documents CLI commands that query UK Parliament APIs; required binaries and install method are proportional to the described purpose.
Instruction Scope
SKILL.md only instructs installing the npm CLI and running the 'parliament' commands. It does not request unrelated files, environment variables, or access to other system paths or external endpoints beyond the expected Parliament APIs.
Install Mechanism
Installation is via an npm package (@shan8851/parliament-cli) which is expected for providing a 'parliament' CLI. npm packages can execute arbitrary code during install/run; this is a normal-but-nonzero risk. No direct downloads or obscure URLs are used.
Credentials
No environment variables or credentials are requested, which is appropriate since the SKILL.md states no auth is required to use the public Parliament APIs.
Persistence & Privilege
always is false and the skill does not request special persistent privileges or modify other skills' configurations. Autonomous invocation is allowed (platform default) but not combined with other elevated privileges.
Assessment
This skill appears coherent: it wraps a CLI that queries public UK Parliament APIs. Before installing, inspect the npm package and its publisher (https://www.npmjs.com/package/@shan8851/parliament-cli), review the package's source repository and package.json (check postinstall/install scripts), and confirm the publisher identity. Prefer installing/testing in a sandbox or container rather than as a global (-g) system install until you trust the package. Note the homepage domain in the manifest (parliment-cli.xyz) — verify it and the package author for typosquatting or impersonation.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🏛️ Clawdis
Binsparliament

Install

Install parliament-cli (npm)
Bins: parliament
npm i -g @shan8851/parliament-cli
latestvk971yxm3r4nr8rj5k1xjyv9n91855sdt
58downloads
0stars
1versions
Updated 3d ago
v0.1.0
MIT-0

parliament-cli

Use parliament for UK Parliament data: bills, members, divisions/votes, and written questions.

Setup

  • npm install -g @shan8851/parliament-cli
  • No API key or auth required

Bills

  • By id: parliament bill 3973
  • By title: parliament bill "renters rights"
  • Search: parliament search bills "energy"

Divisions and Votes

  • Search divisions: parliament divisions "budget"
  • Lookup by id: parliament divisions 2211
  • Alias: parliament votes 2211

Members

  • By name: parliament member "Keir Starmer"
  • By id: parliament member 4514

Written Questions

  • Search: parliament questions "transport"
  • Lookup by id or UIN query: parliament questions 902178

Output

  • Defaults to text in a TTY and JSON when piped
  • Force JSON: parliament bill 3973 --json
  • Success envelope: { ok, schemaVersion, command, requestedAt, data }
  • Error envelope: { ok, schemaVersion, command, requestedAt, error }

Agent Notes

  • Ambiguous text queries return AMBIGUOUS_QUERY with candidate hints in error.details
  • No auth setup needed, so agents can use it immediately
  • Exit codes are explicit and errors stay structured in JSON mode

Notes

  • Official sources include the Bills, Members, Written Questions, and Commons Votes APIs
  • votes is an alias of divisions

Comments

Loading comments...