Openfec

OpenFEC — campaign finance data, candidates, committees, filings, and contribution search.

This skill appears to do what it claims: a small CLI that calls api.open.fec.gov and uses a single FEC_API_KEY. Before installing, confirm you trust the skill author/homepage and consider these points: (1) the script will try a fallback .env at $WORKSPACE or ~/.openclaw/workspace — avoid storing unrelated secrets there if you want to limit exposure; (2) the code contains some URL/parameter bugs (unreplaced '{api_key}' in path strings) that are functional issues, not malicious behavior; (3) you can test with the DEMO_KEY or inspect/execute the script in a sandbox to verify network calls go only to https://api.open.fec.gov. If you need stronger assurance, ask the author for a signed release or run the code in an isolated environment.

Type: OpenClaw Skill Name: openfec Version: 1.0.0 The skill is a legitimate tool for accessing campaign finance data via the official OpenFEC API (api.open.fec.gov). The Python script `scripts/openfec.py` uses only the standard library and implements standard secret management by reading the `FEC_API_KEY` from environment variables or a local `.env` file. While there is a minor implementation bug where the literal string '{api_key}' is included in request paths, no malicious intent, data exfiltration, or harmful instructions were found.