Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pipeworx attom

v1.0.0

Access detailed real estate data including property specs, sales history, market values, tax assessments, rental estimates, sales trends, and nearby schools.

0· 75·0 current·0 all-time
byBruce Gutman@b-gutman

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for b-gutman/pipeworx-attom.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pipeworx attom" (b-gutman/pipeworx-attom) from ClawHub.
Skill page: https://clawhub.ai/b-gutman/pipeworx-attom
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pipeworx-attom

ClawHub CLI

Package manager switcher

npx clawhub@latest install pipeworx-attom
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The name/description advertise ATTOM (a paid data provider), but the SKILL.md does not reference ATTOM's official API or required API keys. Instead it embeds a third‑party endpoint (https://gateway.pipeworx.io/attom/mcp). A premium ATTOM integration would normally require API credentials and an explicit vendor relationship; the absence of those is inconsistent with the claimed purpose.
!
Instruction Scope
The instructions are minimal and implicitly point the agent to use the listed mcpServers gateway. They do not request local file access or extra env vars, but they do imply sending user queries (addresses, location data) to an external server not controlled by the user. There is no documentation in the SKILL.md about authentication, data handling, or what is forwarded to the gateway.
Install Mechanism
This is an instruction‑only skill with no install spec and no code files, so nothing is written to disk by an installer. That lowers the risk from installation mechanisms.
Credentials
The skill declares no required environment variables or credentials. Given the claimed use of a commercial ATTOM feed, that omission is unexpected — either authentication is handled by the third‑party gateway (not disclosed) or the skill is incomplete. The lack of declared credentials means queries will be routed to the external gateway without an explicit, user‑controlled key.
Persistence & Privilege
always is false and the skill has no install scripts or config writes. It does not request elevated or persistent system privileges.
What to consider before installing
This skill is suspicious because it promises ATTOM premium data but points to a third‑party gateway (gateway.pipeworx.io) and includes no API keys or docs about authentication, licensing, or data handling. Before installing: (1) ask the publisher who operates gateway.pipeworx.io and whether they are an authorized ATTOM reseller; (2) ask how authentication and billing for ATTOM data are handled and whether any data you send (addresses, PII) will be stored or logged by the gateway; (3) request a privacy/security policy or source code; (4) if you must test, only send non‑sensitive queries and monitor outgoing traffic; (5) prefer an integration that uses the official ATTOM endpoints with explicit, user‑provided API credentials. Additional information (publisher contact, gateway owner, or code) would raise confidence and could change the verdict.

Like a lobster shell, security has layers — review code before you run it.

latestvk970nhy0eh8e9mdhtddb13y2wn85apt3
75downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

Attom

ATTOM MCP — Premium real estate data from ATTOM Data Solutions

attom_property_detail

Get detailed property specs by address. Returns lot size, square footage, bedrooms, bathrooms, year

attom_property_search

Search properties by location using postal code (e.g., '10001') or latitude/longitude with radius. R

attom_sales_history

Get past sales for a property. Returns sale dates, prices, deed types, and buyer/seller details from

attom_avm

Estimate property market value. Returns estimated value, confidence score, and low/high range for va

attom_assessment

Check property tax assessment details. Returns assessed value, market value, tax amount, tax year, a

attom_sales_trend

Analyze market sales trends by ZIP code. Returns average/median sale price, sales volume, and price

attom_rental_avm

Estimate rental property income. Returns estimated monthly rent, rental yield percentage, and rental

attom_school_search

Find schools near a location. Returns school name, type (public/private), grade levels, distance, an

{
  "mcpServers": {
    "attom": {
      "url": "https://gateway.pipeworx.io/attom/mcp"
    }
  }
}

Comments

Loading comments...