Real Estate Lead Pilot
ReviewAudited by ClawScan on May 10, 2026.
Overview
This realtor lead skill is coherent, but it needs review because it can book calendar slots and write personal lead data while making strong safety and compliance claims that the provided artifacts do not enforce.
Before installing, verify the ThumbGate, CRM, calendar, and webhook setup in a test environment. Use least-privilege integrations, require confirmation before bookings or CRM writes, and do not rely on the hallucination-free or compliance claims without independent validation.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could create appointments or CRM records based on a lead conversation, potentially causing bad bookings, incorrect records, or unwanted business follow-up.
The skill directs the agent to mutate third-party business systems, but the artifacts do not define explicit realtor approval, field-level limits, rollback, or audit requirements.
then books appointments directly into your calendar... Write all lead data and the "PropPhy" behavioral score to the CRM.
Require explicit confirmation before booking or CRM writes, restrict allowed calendars/CRM fields, log every mutation, and provide an easy cancellation or rollback path.
If connected with broad account privileges, the agent may have more authority than needed to qualify leads and schedule meetings.
The skill expects delegated access to CRM and calendar accounts even though the registry metadata declares no primary credential, environment variable, or config path.
**CRM:** Connect your CRM via Webhook (Zapier/Make) or use the `Gog` plugin for Google Sheets. - **Calendar:** Connect your Google/Outlook calendar.
Use least-privilege tokens or webhooks, separate test and production calendars/CRMs, and document exactly which accounts and permissions are required.
Users must trust and correctly install outside components for the advertised grounding and integrations to work.
The setup depends on external tools or plugins that are not included, pinned, or declared in an install specification.
Run `thumbgate import thumbgate-rules.md`... use the `Gog` plugin for Google Sheets.
Verify the source of ThumbGate and any plugins, pin versions where possible, and test imports in a non-production workspace first.
Lead contact details and behavioral judgments may be stored or shared more broadly than expected through CRM or automation platforms.
The skill records personal lead data and behavioral scoring into persistent CRM context, but the artifacts do not specify retention, consent, access controls, or reuse boundaries.
Ensure Name, Phone, and Email are captured before closing a qualification session... MUST log "engagement_score" (1-10) to CRM
Add clear consent language, retention rules, CRM access limits, and controls for correcting or deleting lead records.
A realtor may over-rely on the agent for MLS accuracy, Fair Housing, or DNC compliance and make business or legal decisions without proper human review.
These absolute safety and compliance claims are stronger than what the provided instruction-only artifacts can demonstrate, especially because enforcement depends on external setup.
**Hallucination-Free:** Grounded in your listing data; never "invents" a property feature. - ✅ **Fair Housing Compliant:** Built-in safeguards to protect your license.
Treat the claims as aspirational until verified with real listings, ThumbGate enforcement, CRM/calendar tests, and legal/compliance review.
