Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hunter

v1.0.0

Hunter.io — email finder, email verifier, domain search, author finder, and lead management.

0· 375·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, declared HUNTER_API_KEY, and the included Python CLI all align with Hunter.io functionality. The script targets the official Hunter API (https://api.hunter.io) and the requested credential (HUNTER_API_KEY) is appropriate.
!
Instruction Scope
SKILL.md instructs running the provided script only, but the script's get_env() falls back to reading a workspace .env file (~/.openclaw/workspace/.env or WORKSPACE/.env) to locate HUNTER_API_KEY. That file read is not documented in SKILL.md and is scope creep — the skill will access a local file the user may not expect.
Install Mechanism
No install spec (instruction-only plus an included stdlib Python script). Nothing is downloaded or written to disk by an install step.
!
Credentials
Only HUNTER_API_KEY is declared (and is the primary credential), which is appropriate. However the code also reads WORKSPACE and a local .env file as a fallback. That implicit access to a local .env could expose other secrets if users keep multiple credentials there; WORKSPACE is not declared as required.
Persistence & Privilege
The skill is not always:true, does not request persistent system-wide changes, and does not modify other skills or global agent settings.
What to consider before installing
This skill appears to implement Hunter.io API calls and only needs your HUNTER_API_KEY. Before installing: (1) confirm you trust the publisher (agxntsix.ai / M. Abidi); (2) be aware the script will try to read a workspace .env file (~/.openclaw/workspace/.env or $WORKSPACE/.env) if HUNTER_API_KEY is not set — review that file for other secrets or remove unrelated secrets from it; (3) consider creating a scoped/limited Hunter API key for this use and monitor its usage; (4) note the script has some minor bugs in how it builds query parameters (these are functional issues, not obviously malicious). If you need guaranteed minimal surface, run the script manually from a controlled environment or set HUNTER_API_KEY explicitly in the environment rather than relying on the .env fallback.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔍 Clawdis
EnvHUNTER_API_KEY
Primary envHUNTER_API_KEY
latestvk97bcvh467fcmwpgj3jz6g6vh9829k56
375downloads
0stars
1versions
Updated 8h ago
v1.0.0
MIT-0

🔍 Hunter.io

Hunter.io — email finder, email verifier, domain search, author finder, and lead management.

Requirements

VariableRequiredDescription
HUNTER_API_KEYHunter.io API key

Quick Start

# Find emails for a domain
python3 {{baseDir}}/scripts/hunter.py domain-search --domain <value> --limit "10" --type <value>

# Find specific person's email
python3 {{baseDir}}/scripts/hunter.py email-finder --domain <value> --first-name <value> --last-name <value>

# Verify an email address
python3 {{baseDir}}/scripts/hunter.py email-verifier --email <value>

# Count emails for domain
python3 {{baseDir}}/scripts/hunter.py email-count --domain <value>

# List saved leads
python3 {{baseDir}}/scripts/hunter.py list-leads --limit "20" --offset "0"

# Create a lead
python3 {{baseDir}}/scripts/hunter.py create-lead --email <value> --first-name <value> --last-name <value> --company <value>

# Update a lead
python3 {{baseDir}}/scripts/hunter.py update-lead <id> --email <value> --first-name <value> --last-name <value>

# Delete a lead
python3 {{baseDir}}/scripts/hunter.py delete-lead <id>

# List lead lists
python3 {{baseDir}}/scripts/hunter.py list-leads-lists

# Get account info & usage
python3 {{baseDir}}/scripts/hunter.py get-account

# Find author of article
python3 {{baseDir}}/scripts/hunter.py author-finder --url <value>

Output Format

All commands output JSON by default.

Script Reference

ScriptDescription
{baseDir}/scripts/hunter.pyMain CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Comments

Loading comments...