← 返回 Skills 市场
Pipeworx Govcon Analyst
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
81
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-govcon-analyst
功能描述
Analyze federal government contracting data from SAM.gov, USAspending, and SBIR to profile contractors, find opportunities, and assess agency spending.
安全使用建议
This skill appears to implement the govcon analysis features it advertises, but it routes runtime queries and any saved memory to an external Pipeworx gateway (gateway.pipeworx.io) that is not documented in the registry metadata. Before installing: (1) verify the skill's author and the gateway's ownership and privacy/retention policy, (2) ask whether and how queries, uploaded documents, and agent memory are stored or logged, (3) avoid sending secrets or sensitive PII through the skill until you confirm the endpoint and authentication model, (4) consider disabling autonomous invocation for this skill or testing it in a sandboxed environment, and (5) request the SKILL implementation/source or run a local/self-hosted MCP if you require full control over data flow.
功能分析
Type: OpenClaw Skill
Name: pipeworx-govcon-analyst
Version: 1.0.0
The skill bundle provides a set of tools for analyzing government contracting data from SAM.gov, USAspending, and SBIR.gov. It utilizes an external MCP gateway (gateway.pipeworx.io) to process queries, which is standard for this type of integration. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
The name, description, and listed tools (SAM.gov, USAspending, SBIR data and related search/profile functions) are consistent with each other. There are no declared env vars, binaries, or config paths that are unrelated to the stated purpose.
Instruction Scope
The SKILL.md includes an MCP server config that points to https://gateway.pipeworx.io/mcp?task=govcon%20analysis and instructs the agent to use compound tools (ask_pipeworx) and memory functions (remember/recall). Those instructions cause runtime data and queries to be sent to a third-party gateway, but the skill provides no explanation of what is sent, how it is authenticated, or how data is stored/retained — creating a potential data-exfiltration and privacy risk.
Install Mechanism
No install spec or code files are present; the skill is instruction-only and performs no local installation. This minimizes on-disk risk.
Credentials
The skill requests no environment variables or credentials. That could be legitimate if the external gateway handles auth, but the absence of declared credentials or an explanation of auth means you cannot verify where or how any API keys or PII would be provided or stored. The instructions also encourage using agent memory (remember/recall), which persists data and could store sensitive results.
Persistence & Privilege
always is false (normal). The skill is allowed to be invoked autonomously (disable-model-invocation false) which is the platform default. Combined with the external gateway reference, autonomous invocation increases the blast radius because the agent can send data to an external service without additional prompts.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pipeworx-govcon-analyst - 安装完成后，直接呼叫该 Skill 的名称或使用
/pipeworx-govcon-analyst触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx Govcon Analyst 是什么？
Analyze federal government contracting data from SAM.gov, USAspending, and SBIR to profile contractors, find opportunities, and assess agency spending. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 81 次。
如何安装 Pipeworx Govcon Analyst？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-govcon-analyst」即可一键安装，无需额外配置。
Pipeworx Govcon Analyst 是免费的吗？
是的，Pipeworx Govcon Analyst 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Pipeworx Govcon Analyst 支持哪些平台？
Pipeworx Govcon Analyst 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Pipeworx Govcon Analyst？
由 Bruce Gutman（@brucegutman）开发并维护，当前版本 v1.0.0。
推荐 Skills