Apollo.io Sales Intelligence
v1.0.0Apollo.io Sales Intelligence enables lead discovery, contact and company enrichment, and prospecting using a database of 210M+ contacts and 35M+ companies.
⭐ 1· 1.5k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The code and SKILL.md clearly implement an Apollo.io client (people/company search and enrichment) and legitimately require an APOLLO_API_KEY. However, the registry metadata at the top of the submission lists no required environment variables or primary credential while SKILL.md declares APOLLO_API_KEY. That mismatch is an incoherence between what the skill claims in metadata and what it actually needs.
Instruction Scope
SKILL.md instructs the agent/user to set APOLLO_API_KEY and run the included Python scripts. The runtime instructions and scripts are scoped to calling Apollo's API (https://api.apollo.io/v1) and formatting results. The scripts do not read unrelated system files, do not call unexpected external endpoints, and do not request other secrets.
Install Mechanism
There is no install spec and no remote downloads; the skill is delivered as local Python scripts. It requires Python and the 'requests' library (not declared in an install step), which is a low-risk, expected dependency for this kind of skill.
Credentials
The only secret required by the implementation is APOLLO_API_KEY (used as X-Api-Key). That is proportionate to the stated purpose. The concern is that the registry-level 'Requirements' block provided earlier lists no required env vars or primary credential while SKILL.md and code require APOLLO_API_KEY — an inconsistency that could mislead users about what they must supply and which secret the skill will access.
Persistence & Privilege
The skill does not request permanent/always-on presence, does not modify other skills or system configs, and follows normal user-invocable/autonomous invocation defaults. It does not request elevated privileges.
What to consider before installing
This skill's code matches its stated purpose (Apollo.io people/company search and enrichment) and only needs your Apollo API key. However, the package metadata does not list APOLLO_API_KEY while SKILL.md and the Python files do — that's an inconsistency. Before installing: (1) verify the skill's source and owner (the repository/homepage in SKILL.md points to a GitHub path you should inspect), (2) review the code yourself (it only calls api.apollo.io) to ensure there are no additional network calls, (3) only provide an APOLLO_API_KEY you control and revoke it if you stop using the skill, and (4) ask the publisher to correct the registry metadata so required credentials are declared explicitly. If you can't confirm the origin or the author won't fix the metadata, treat the skill as higher risk.Like a lobster shell, security has layers — review code before you run it.
latestvk978pzbbgvcxkbqpsw5a6y2551809v5p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.