← Back to Skills Marketplace
Pipeworx Govcon Analyst
by
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
81
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pipeworx-govcon-analyst
Description
Analyze federal government contracting data from SAM.gov, USAspending, and SBIR to profile contractors, find opportunities, and assess agency spending.
Usage Guidance
This skill appears to implement the govcon analysis features it advertises, but it routes runtime queries and any saved memory to an external Pipeworx gateway (gateway.pipeworx.io) that is not documented in the registry metadata. Before installing: (1) verify the skill's author and the gateway's ownership and privacy/retention policy, (2) ask whether and how queries, uploaded documents, and agent memory are stored or logged, (3) avoid sending secrets or sensitive PII through the skill until you confirm the endpoint and authentication model, (4) consider disabling autonomous invocation for this skill or testing it in a sandboxed environment, and (5) request the SKILL implementation/source or run a local/self-hosted MCP if you require full control over data flow.
Capability Analysis
Type: OpenClaw Skill
Name: pipeworx-govcon-analyst
Version: 1.0.0
The skill bundle provides a set of tools for analyzing government contracting data from SAM.gov, USAspending, and SBIR.gov. It utilizes an external MCP gateway (gateway.pipeworx.io) to process queries, which is standard for this type of integration. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The name, description, and listed tools (SAM.gov, USAspending, SBIR data and related search/profile functions) are consistent with each other. There are no declared env vars, binaries, or config paths that are unrelated to the stated purpose.
Instruction Scope
The SKILL.md includes an MCP server config that points to https://gateway.pipeworx.io/mcp?task=govcon%20analysis and instructs the agent to use compound tools (ask_pipeworx) and memory functions (remember/recall). Those instructions cause runtime data and queries to be sent to a third-party gateway, but the skill provides no explanation of what is sent, how it is authenticated, or how data is stored/retained — creating a potential data-exfiltration and privacy risk.
Install Mechanism
No install spec or code files are present; the skill is instruction-only and performs no local installation. This minimizes on-disk risk.
Credentials
The skill requests no environment variables or credentials. That could be legitimate if the external gateway handles auth, but the absence of declared credentials or an explanation of auth means you cannot verify where or how any API keys or PII would be provided or stored. The instructions also encourage using agent memory (remember/recall), which persists data and could store sensitive results.
Persistence & Privilege
always is false (normal). The skill is allowed to be invoked autonomously (disable-model-invocation false) which is the platform default. Combined with the external gateway reference, autonomous invocation increases the blast radius because the agent can send data to an external service without additional prompts.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pipeworx-govcon-analyst - After installation, invoke the skill by name or use
/pipeworx-govcon-analyst - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Pipeworx Govcon Analyst?
Analyze federal government contracting data from SAM.gov, USAspending, and SBIR to profile contractors, find opportunities, and assess agency spending. It is an AI Agent Skill for Claude Code / OpenClaw, with 81 downloads so far.
How do I install Pipeworx Govcon Analyst?
Run "/install pipeworx-govcon-analyst" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Pipeworx Govcon Analyst free?
Yes, Pipeworx Govcon Analyst is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Pipeworx Govcon Analyst support?
Pipeworx Govcon Analyst is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Pipeworx Govcon Analyst?
It is built and maintained by Bruce Gutman (@brucegutman); the current version is v1.0.0.
More Skills