Real Estate Lead Pilot

ReviewAudited by ClawScan on May 10, 2026.

Overview

This realtor lead skill is coherent, but it needs review because it can book calendar slots and write personal lead data while making strong safety and compliance claims that the provided artifacts do not enforce.

Before installing, verify the ThumbGate, CRM, calendar, and webhook setup in a test environment. Use least-privilege integrations, require confirmation before bookings or CRM writes, and do not rely on the hallucination-free or compliance claims without independent validation.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could create appointments or CRM records based on a lead conversation, potentially causing bad bookings, incorrect records, or unwanted business follow-up.

Why it was flagged

The skill directs the agent to mutate third-party business systems, but the artifacts do not define explicit realtor approval, field-level limits, rollback, or audit requirements.

Skill content
then books appointments directly into your calendar... Write all lead data and the "PropPhy" behavioral score to the CRM.
Recommendation

Require explicit confirmation before booking or CRM writes, restrict allowed calendars/CRM fields, log every mutation, and provide an easy cancellation or rollback path.

What this means

If connected with broad account privileges, the agent may have more authority than needed to qualify leads and schedule meetings.

Why it was flagged

The skill expects delegated access to CRM and calendar accounts even though the registry metadata declares no primary credential, environment variable, or config path.

Skill content
**CRM:** Connect your CRM via Webhook (Zapier/Make) or use the `Gog` plugin for Google Sheets.
- **Calendar:** Connect your Google/Outlook calendar.
Recommendation

Use least-privilege tokens or webhooks, separate test and production calendars/CRMs, and document exactly which accounts and permissions are required.

What this means

Users must trust and correctly install outside components for the advertised grounding and integrations to work.

Why it was flagged

The setup depends on external tools or plugins that are not included, pinned, or declared in an install specification.

Skill content
Run `thumbgate import thumbgate-rules.md`... use the `Gog` plugin for Google Sheets.
Recommendation

Verify the source of ThumbGate and any plugins, pin versions where possible, and test imports in a non-production workspace first.

What this means

Lead contact details and behavioral judgments may be stored or shared more broadly than expected through CRM or automation platforms.

Why it was flagged

The skill records personal lead data and behavioral scoring into persistent CRM context, but the artifacts do not specify retention, consent, access controls, or reuse boundaries.

Skill content
Ensure Name, Phone, and Email are captured before closing a qualification session... MUST log "engagement_score" (1-10) to CRM
Recommendation

Add clear consent language, retention rules, CRM access limits, and controls for correcting or deleting lead records.

What this means

A realtor may over-rely on the agent for MLS accuracy, Fair Housing, or DNC compliance and make business or legal decisions without proper human review.

Why it was flagged

These absolute safety and compliance claims are stronger than what the provided instruction-only artifacts can demonstrate, especially because enforcement depends on external setup.

Skill content
**Hallucination-Free:** Grounded in your listing data; never "invents" a property feature.
- ✅ **Fair Housing Compliant:** Built-in safeguards to protect your license.
Recommendation

Treat the claims as aspirational until verified with real listings, ThumbGate enforcement, CRM/calendar tests, and legal/compliance review.