Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pipeworx congress

v1.0.0

Access US Congress data to search bills, retrieve bill details, get current members, and view recent congressional votes via GovTrack API.

0· 68·0 current·0 all-time
byBruce Gutman@b-gutman

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for b-gutman/pipeworx-congress.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pipeworx congress" (b-gutman/pipeworx-congress) from ClawHub.
Skill page: https://clawhub.ai/b-gutman/pipeworx-congress
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pipeworx-congress

ClawHub CLI

Package manager switcher

npx clawhub@latest install pipeworx-congress
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description say 'GovTrack API (free, no auth required)'. The SKILL.md contains an mcpServers entry that points to https://gateway.pipeworx.io/congress/mcp rather than directly to GovTrack. That is inconsistent with the stated source and may mean traffic is proxied through a third party; otherwise the declared purpose and requirements (no creds, no binaries) are coherent.
!
Instruction Scope
SKILL.md gives only brief method descriptions and a JSON mcpServers config. It does not explain what data is sent to the gateway, whether queries or surrounding agent context will be forwarded, or whether the gateway calls GovTrack on the skill's behalf. The instructions do not request local files or env vars, but they also do not disclose data handling/retention for the external endpoint.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk or installed by the skill itself.
Credentials
No environment variables, credentials, or config paths are requested — this is proportionate to a read-only congress data lookup skill.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. Default autonomous invocation is allowed (platform default) and not by itself a concern here.
What to consider before installing
This skill mostly looks like a simple GovTrack wrapper, but it embeds a third‑party MCP endpoint (gateway.pipeworx.io) instead of calling GovTrack directly. Before installing, ask the publisher: (1) why the gateway is used instead of GovTrack, (2) what data is forwarded to that gateway (including any surrounding agent context), and (3) the gateway's privacy/retention policy and ownership. If you cannot get satisfactory answers, avoid sending sensitive or private queries to this skill; consider using a skill that calls the official GovTrack API directly or request the full implementation so you can verify where traffic goes.

Like a lobster shell, security has layers — review code before you run it.

latestvk97adqt159dw2hxmnny3jrz4p985dw3s
68downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

Congress

Congress MCP — US Congress data via GovTrack API (free, no auth required)

search_bills

Search US congressional bills by keyword. Returns bill type, number, title, status, sponsor, and int

get_bill

Get full details for a congressional bill by its ID. Returns text, sponsors, cosponsors, committee a

get_members

Get current members of Congress with their name, party, state, district (for representatives), and c

get_votes

Get recent congressional votes on bills. Returns question, result, chamber, vote counts (yes/no/abst

{
  "mcpServers": {
    "congress": {
      "url": "https://gateway.pipeworx.io/congress/mcp"
    }
  }
}

Comments

Loading comments...