Hunter
v1.0.0Hunter.io — email finder, email verifier, domain search, author finder, and lead management.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description, declared HUNTER_API_KEY, and the included Python CLI all align with Hunter.io functionality. The script targets the official Hunter API (https://api.hunter.io) and the requested credential (HUNTER_API_KEY) is appropriate.
Instruction Scope
SKILL.md instructs running the provided script only, but the script's get_env() falls back to reading a workspace .env file (~/.openclaw/workspace/.env or WORKSPACE/.env) to locate HUNTER_API_KEY. That file read is not documented in SKILL.md and is scope creep — the skill will access a local file the user may not expect.
Install Mechanism
No install spec (instruction-only plus an included stdlib Python script). Nothing is downloaded or written to disk by an install step.
Credentials
Only HUNTER_API_KEY is declared (and is the primary credential), which is appropriate. However the code also reads WORKSPACE and a local .env file as a fallback. That implicit access to a local .env could expose other secrets if users keep multiple credentials there; WORKSPACE is not declared as required.
Persistence & Privilege
The skill is not always:true, does not request persistent system-wide changes, and does not modify other skills or global agent settings.
What to consider before installing
This skill appears to implement Hunter.io API calls and only needs your HUNTER_API_KEY. Before installing: (1) confirm you trust the publisher (agxntsix.ai / M. Abidi); (2) be aware the script will try to read a workspace .env file (~/.openclaw/workspace/.env or $WORKSPACE/.env) if HUNTER_API_KEY is not set — review that file for other secrets or remove unrelated secrets from it; (3) consider creating a scoped/limited Hunter API key for this use and monitor its usage; (4) note the script has some minor bugs in how it builds query parameters (these are functional issues, not obviously malicious). If you need guaranteed minimal surface, run the script manually from a controlled environment or set HUNTER_API_KEY explicitly in the environment rather than relying on the .env fallback.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🔍 Clawdis
EnvHUNTER_API_KEY
Primary envHUNTER_API_KEY
latest
🔍 Hunter.io
Hunter.io — email finder, email verifier, domain search, author finder, and lead management.
Requirements
| Variable | Required | Description |
|---|---|---|
HUNTER_API_KEY | ✅ | Hunter.io API key |
Quick Start
# Find emails for a domain
python3 {{baseDir}}/scripts/hunter.py domain-search --domain <value> --limit "10" --type <value>
# Find specific person's email
python3 {{baseDir}}/scripts/hunter.py email-finder --domain <value> --first-name <value> --last-name <value>
# Verify an email address
python3 {{baseDir}}/scripts/hunter.py email-verifier --email <value>
# Count emails for domain
python3 {{baseDir}}/scripts/hunter.py email-count --domain <value>
# List saved leads
python3 {{baseDir}}/scripts/hunter.py list-leads --limit "20" --offset "0"
# Create a lead
python3 {{baseDir}}/scripts/hunter.py create-lead --email <value> --first-name <value> --last-name <value> --company <value>
# Update a lead
python3 {{baseDir}}/scripts/hunter.py update-lead <id> --email <value> --first-name <value> --last-name <value>
# Delete a lead
python3 {{baseDir}}/scripts/hunter.py delete-lead <id>
# List lead lists
python3 {{baseDir}}/scripts/hunter.py list-leads-lists
# Get account info & usage
python3 {{baseDir}}/scripts/hunter.py get-account
# Find author of article
python3 {{baseDir}}/scripts/hunter.py author-finder --url <value>
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/hunter.py | Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
Comments
Loading comments...
