Is gov-contracts safe to install?

SaferSkills independently audited gov-contracts (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

openclaw-skills/martc03/gov-contracts/SKILL.md · 1 file

openclaw-skills/martc03/gov-contracts/SKILL.md2.0 KB · Markdown

name: gov-contracts

description: SAM.gov contract opportunities, USAspending awards, and entity lookup. 3 tools for government contracting.

homepage: https://github.com/martc03/gov-mcp-servers

metadata: {"clawdbot":{"emoji":"📋","requires":{"bins":["mcporter"]}}}

Government Contracts

Search SAM.gov contract opportunities, federal spending awards, and registered entities.

Setup

mcporter add gov-contracts --url https://gov-contracts-mcp.apify.actor/mcp --transport streamable-http

Or add to your OpenClaw MCP config (~/.openclaw/mcp.json):

{
  "servers": {
    "gov-contracts": {
      "url": "https://gov-contracts-mcp.apify.actor/mcp",
      "transport": "streamable-http"
    }
  }
}

Available Tools

`contracts_search_opportunities`

Search SAM.gov for contract opportunities (RFPs, RFQs, solicitations).

Search for cybersecurity contract opportunities
Find IT contracts posted this month

Parameters: keyword, naicsCode, postedFrom (MM/dd/yyyy), postedTo, limit, offset

`contracts_search_spending`

Search USASpending.gov for federal awards data (contracts, grants, loans).

Show federal contracts for Lockheed Martin
Search USAspending for defense grants

Parameters: keyword, awardType ("contracts", "grants", "loans", "direct_payments", "other"), dateFrom (YYYY-MM-DD), dateTo, agency, limit, page

`contracts_lookup_entity`

Search SAM.gov for registered entities (contractors, grantees) by name, UEI, or CAGE code.

Look up Raytheon in SAM.gov
Search for contractors in California

Parameters: legalBusinessName, ueiSAM, cageCode, state, limit

Data Sources

SAM.gov — System for Award Management (opportunities + entity registration)
USASpending.gov — Federal spending transparency

Use Cases

Government contract bidding
Competitive intelligence for GovCon
Federal spending analysis
Vendor due diligence

All data from free US government APIs. Zero cost. No API keys required.

gov-contracts— agent skill

Is gov-contracts safe to install?

Government Contracts

Setup

Available Tools

`contracts_search_opportunities`

`contracts_search_spending`

`contracts_lookup_entity`

Data Sources

Use Cases

Audit the pieces. Scan the whole. Decide.