Openclaw Skill

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for using Easy Email Finder, but users should know it needs an API key and some calls spend service credits.

Before installing, confirm you trust the Easy Email Finder service, provide only the intended API key, and supervise paid enrichment calls so the agent does not use more credits than expected.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

If installed, the agent can use the configured Easy Email Finder API key when making documented API calls.

Why it was flagged

The skill uses an account API key for Easy Email Finder requests; this is expected for the service, but it gives the agent access to that account's API quota and usage.

Skill content

All requests require a Bearer token. The API key is available in the `EEF_API_KEY` environment variable.

Recommendation

Use a dedicated API key with appropriate account limits, and rotate or revoke it if the skill is no longer needed.

Low

#ASI02: Tool Misuse and Exploitation

What this means

Poorly scoped or unintended enrichment requests could spend account credits.

Why it was flagged

The skill documents API operations that consume paid credits; the cost and limits are disclosed and aligned with the lead-enrichment purpose.

Skill content

Search + enrich in one call (1 credit per result) ... `limit` defaults to 20, max 60.

Recommendation

Review the query, endpoint, and result limit before running paid enrichment calls, and check the balance or usage endpoints to monitor spending.