Brand Prospect Researcher
v1.0.0Find brands actively spending on influencer and creator campaigns. Scans trade press, Instagram, job boards, and news for active-spender signals, then output...
⭐ 0· 29·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: the SKILL.md instructs web searches, job-board checks, trade press scanning and optional Instagram CLI checks — all directly relevant to finding brands spending on influencer campaigns. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
Runtime instructions are scoped to web_search, web_fetch and optional gram CLI usage and specify which queries and signals to collect. The skill asks the agent to extract public-facing items (brand, campaign, job posts, public contact info). It does not instruct reading local files or environment variables beyond a 'which gram' check. Note: collecting public contact emails/LinkedIn URLs involves scraping public records; that is expected for prospecting but may have legal/ToS implications.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by the skill itself. The only optional external tool is the gram CLI (queried via which); that is user-installed and not pulled in by the skill.
Credentials
No environment variables, credentials, or config paths are requested. The optional gram CLI may require separate credentials to run, but the skill itself does not request or assume any secrets.
Persistence & Privilege
always:false and default model-invocation settings (autonomous invocation allowed) are used. The skill does not request permanent presence or modify other skills or system-wide settings.
Assessment
This skill is coherent for prospect research, but consider: (1) the agent will perform automated web searches and may scrape public contact info — ensure you are comfortable with that and compliant with relevant ToS and privacy laws; (2) Instagram checks rely on an optional gram CLI you must install and authenticate separately — that may require Instagram credentials and could run afoul of Instagram's terms if used to scrape protected data; (3) verify any contact emails/claims before outreach to avoid stale or incorrect leads; and (4) if you allow autonomous agent runs, monitor outputs until you confirm results are appropriate.Like a lobster shell, security has layers — review code before you run it.
latestvk97eae49dxzj609n5f6b2a2rmx848e1a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.