Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pipeworx court-listener

v1.0.0

Search US court opinions and dockets by keyword, and retrieve specific court opinions by CourtListener ID with no authentication needed.

0· 67·0 current·0 all-time
byBruce Gutman@brucegutman

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for brucegutman/pipeworx-court-listener.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pipeworx court-listener" (brucegutman/pipeworx-court-listener) from ClawHub.
Skill page: https://clawhub.ai/brucegutman/pipeworx-court-listener
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pipeworx-court-listener

ClawHub CLI

Package manager switcher

npx clawhub@latest install pipeworx-court-listener
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the declared functionality (search opinions/dockets, retrieve by ID). However the SKILL.md maps an MCP server to https://gateway.pipeworx.io/court-listener/mcp rather than calling CourtListener's official API directly. Using a proxy backend is plausible but not explained in the metadata (no homepage, no source).
Instruction Scope
The runtime instructions are narrowly scoped to search/get operations and include an mcpServers entry. They do not instruct reading local files or environment variables. The key concern is that the instructions direct the agent to an external, non-official endpoint (gateway.pipeworx.io) — meaning all queries (including potentially sensitive search terms or document requests) will be sent to that third party.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes disk/installation risk; nothing is downloaded or executed locally by the skill itself.
Credentials
No environment variables, credentials, or config paths are requested. The declared permissions are minimal and proportionate to a read-only search/retrieval skill.
Persistence & Privilege
always:false and user-invocable:true (defaults). The skill does not request persistent system-level privileges or to modify other skills; autonomous invocation is allowed by platform defaults but not a special flag here.
What to consider before installing
This skill appears to implement CourtListener-style search but routes requests through an unverified proxy at gateway.pipeworx.io run by an unknown owner. Before installing, consider: (1) Do you trust the gateway operator to handle search queries and retrieved opinion text? The operator could log queries or responses. (2) If you need privacy or provable source authenticity, prefer a skill that calls CourtListener's official API (courtlistener.com) or provide your own proxy. (3) Ask the publisher for source code, a homepage, or an explanation why a custom gateway is used. (4) Avoid sending sensitive or confidential text as search queries. If you cannot verify the gateway/operator, treat the skill as untrusted for confidential data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cj7t60sbkhpzgh432b8pcsx85c38c
67downloads
0stars
1versions
Updated 4d ago
v1.0.0
MIT-0

Court Listener

CourtListener MCP — Free Law Project's CourtListener API (free, no auth required for basic access)

search_opinions

Search US court opinions by keyword (e.g., "qualified immunity", "Fourth Amendment"). Returns case n

search_dockets

Search US court dockets by keyword. Returns case name, court, filing date, docket number, nature of

get_opinion

Get a specific court opinion by its CourtListener ID. Returns the full opinion text, author, date, a

{
  "mcpServers": {
    "court-listener": {
      "url": "https://gateway.pipeworx.io/court-listener/mcp"
    }
  }
}

Comments

Loading comments...