Crm Manager

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may add or update CRM rows in the local workspace file when asked to manage CRM data.

Why it was flagged

The skill instructs the agent to create and modify a local CRM CSV file. This is purpose-aligned, but users should understand it authorizes local file changes.

Skill content
Default: `crm.csv` in the workspace. Create from `crm-template.csv` if it doesn't exist.
Recommendation

Use it in the intended workspace and review important CRM changes, especially bulk edits.

What this means

The CSV may contain personal contact information, sales information, and notes that future agent interactions can read.

Why it was flagged

The CRM schema includes contact details, deal values, and freeform notes that will be stored and reused from the local CSV.

Skill content
email,phone,stage,deal_value,source,last_contact,next_action,next_action_date,notes,created,updated
Recommendation

Avoid placing unnecessary sensitive information in CRM notes, and keep the CSV in an appropriate private workspace.

What this means

A user or agent could be prompted to install additional unrelated skills if they follow the promotional section.

Why it was flagged

The skill includes a marketing table with install commands for unrelated AfrexAI skills. It does not require or automatically install them, but they are outside the CRM task.

Skill content
| AI Humanizer | `clawhub install afrexai-humanizer` |
Recommendation

Install additional skills only deliberately after reviewing their separate artifacts and permissions.