ClawHub

ActiveCampaign CRM

v1.0.0

ActiveCampaign CRM integration for lead management, deal tracking, and email automation. Use for syncing demo leads, managing clinic sales pipeline, and triggering follow-up sequences.

⭐ 2· 3.6k·10 current·10 all-time
by@kesslerio
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description ask for CRM integration and the skill requires an 'activecampaign' CLI plus ACTIVECAMPAIGN_URL and ACTIVECAMPAIGN_API_KEY — these are proportional and expected for an ActiveCampaign wrapper.
✓
Instruction Scope
SKILL.md instructs the agent to use the activecampaign CLI and to store credentials/config under ~/.config/activecampaign or via environment variables; listed CLI commands (contacts, deals, tags, automations, fields) are consistent with the stated CRM tasks. There are no instructions to read unrelated system paths or to send data to non-ActiveCampaign endpoints.
ℹ
Install Mechanism
This is an instruction-only skill (no install spec or code). That limits on-disk changes from the skill itself, but the skill requires a local 'activecampaign' binary — you should verify the origin and integrity of that CLI before installing/using it, since the skill assumes it exists and will invoke it.
✓
Credentials
Only ACTIVECAMPAIGN_URL and ACTIVECAMPAIGN_API_KEY are required (and are declared as primary credentials). This matches the service's needs. Note: the fields mapping includes PII/financial fields (billing, payment_last4, etc.), so protect API credentials and configuration files to avoid exposing sensitive contact/payment data.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent elevated privileges or modify other skills. Autonomous invocation is permitted (platform default) but not combined with other red flags here.
Assessment
This skill appears to do what it says: it calls a local 'activecampaign' CLI and needs your ActiveCampaign URL and API key. Before installing/using: (1) verify and obtain the 'activecampaign' CLI from a trusted source (check project homepage or repository; the skill bundle has no code), (2) create an API key with minimal necessary scopes in ActiveCampaign and rotate it if possible, (3) avoid committing credentials or ~/.config/activecampaign/fields.json into source control (the README already recommends gitignore), (4) be aware the integration can read/write contacts and custom fields (may include PII and payment-related metadata), so restrict access and monitor API usage. If you want higher assurance, run the CLI in a sandboxed environment first and confirm the CLI's network calls only target your ActiveCampaign account endpoints.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bsfasjhccjey36gc782azwx809m15

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📧 Clawdis
Binsactivecampaign
EnvACTIVECAMPAIGN_URL, ACTIVECAMPAIGN_API_KEY

Comments