Sales Pipeline Agent

PassAudited by ClawScan on May 9, 2026.

Overview

This appears to be a local sales-pipeline tracker, but it stores business/contact records on disk and can modify or delete them.

Reasonable to install if you want a local sales-pipeline helper. Before using it, know where the pipeline.json file is stored, back it up, avoid putting secrets in deal notes, and confirm carefully before asking the agent to delete records.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less external context for verifying the maintainer or update history.

Why it was flagged

The registry metadata does not provide an external source repository or homepage for provenance, although the included files are small and reviewable.

Skill content
Source: unknown
Homepage: none
Recommendation

Review the included files before installing and prefer source-linked or signed packages when available.

What this means

If the wrong deal is deleted, the local pipeline record may be lost unless you have a backup.

Why it was flagged

The delete operation permanently removes a deal from the local JSON database when invoked.

Skill content
db["deals"].pop(deal_id)
    save_db(db)
Recommendation

Back up pipeline.json and require clear confirmation before deleting or bulk-updating sales records.

What this means

Sales contacts, emails, deal values, and notes remain on disk and may be reused in later skill interactions.

Why it was flagged

The skill uses persistent local storage for deal, contact, revenue, notes, and activity data.

Skill content
All deals are stored at `~/.openclaw/workspace/sales-pipeline-agent/pipeline.json`. Back it up regularly.
Recommendation

Protect and back up the local database, avoid storing secrets or regulated data in deal notes, and treat prospect-provided text as data rather than instructions.