B2b Sdr Agent Template

Do not run deploy/install scripts until you review them and confirm their origin. Steps to consider before installing: - Verify the source: the registry lists no homepage and owner identity is opaque. Check the linked GitHub repo and commit history to confirm authenticity. - Inspect deploy/*.sh and install.sh line-by-line (or run them in a disposable VM/container) to see what they write, what external URLs they contact, and whether they download binaries. - Prepare least-privilege credentials: create separate API keys/accounts for MemOS/Chroma/LLM and avoid using production credentials during initial tests. - Be cautious about the dashboard token and default 'lan' binding: set GATEWAY_BIND=loopback or otherwise restrict access before first start. - Note the skill will inject dynamic memory into the System Prompt and modify OpenClaw config; only allow that in environments where you accept the agent changing system prompts and cron jobs. - Evaluate privacy/regulatory impact: the agent stores conversation history, quotes, and PII in third-party services (MemOS/Chroma); ensure compliance with data protection rules and retention policies. - If you need to proceed, test in an isolated sandbox (container or VM) and monitor network traffic during the deploy to detect unexpected exfiltration. If you want, I can scan the deploy and ip-isolate scripts for specific risky operations (remote downloads, exec of fetched payloads, or writes to system directories) and summarize which lines to review first.