Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lead Hunter

Automated lead generation + enrichment for AI agents. Find prospects, enrich with emails/socials/company data, score & prioritize. Your agent builds pipeline while you sleep.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
4 · 3.1k · 10 current installs · 10 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name and description match the instructions (discover, enrich, score, export leads). However, the registry metadata lists no required credentials or env vars, while the SKILL.md repeatedly references API keys/tokens (X/Twitter API key, GitHub token, Moltbook key, Hunter.io/Clearbit/Crounchbase, etc.), proxies for LinkedIn, and premium provider integrations. That mismatch between declared requirements and the described capabilities is incoherent and should have been declared explicitly.
!
Instruction Scope
The runtime instructions instruct broad data collection (scraping public profiles, email discovery/verification, phone lookups, tech stack detection), use of proxies for LinkedIn, and auto-outreach/webhook integrations. Those actions are within the skill's sales/lead-gen purpose but the instructions are operationally broad and vague about legal/ethical safeguards, data retention, or consent. 'Proxy' usage and scraping notes in particular suggest bypassing platform limits or protections, which is risky and not justified in the metadata.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. Nothing is written to disk by an installer. However, because the instructions direct network calls and external API usage, runtime risks depend on how the host agent executes those steps.
!
Credentials
Functionally, the skill requires many external credentials (various APIs and enrichment providers), but the manifest declares no required env vars or primary credential. Requiring multiple third-party API keys would be proportionate to the task, but they must be declared and scoped; their absence in the metadata is an inconsistency and a transparency problem. Users should not hand over broad account credentials without clear justification and scoping.
Persistence & Privilege
The skill does not set always:true and there are no OS restrictions, but disableModelInvocation is not set (model invocation allowed). That means the agent could autonomously trigger discovery/enrichment/outreach actions if not otherwise constrained. Given the skill's ability to perform outreach/webhooks, you should consider limiting autonomous invocation or requiring explicit user approval before sending messages or exporting data.
What to consider before installing
This skill appears to do what it says, but there are important red flags and missing details. Before installing: - Expect to provide many third-party API keys (Twitter/X, GitHub, Hunter.io/Clearbit, Crunchbase, Moltbook, CRM tokens). Only provide minimal-scoped tokens and avoid sharing full-account credentials. - Ask the author to update the registry metadata to declare required env vars and exactly which tokens are needed. - Review the enrichment and scraping docs for legal and privacy compliance (GDPR, platform Terms of Service). Avoid using proxies or scraping approaches that violate site terms. - Disable autonomous model invocation (or require user confirmation) if you do not want the agent to send outreach messages or webhooks without intervention. - Test on a small, low-risk dataset first and audit outputs (duplicates, accuracy) before letting it run at scale or charging customers. If you need help assessing the specific provider integrations (Hunter/Clearbit/Crunchbase) or drafting a safer deployment configuration, get more detail from the skill author before proceeding.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.1
Download zip
latestvk970swkf7bc8dnwv80mrvz706d80kfea

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Lead Hunter

Your agent's sales pipeline on autopilot. Find leads. Enrich them. Score them. Close them.

The Problem

Lead gen is a grind:

  • Manual searching across platforms
  • Copy-pasting into spreadsheets
  • Paying $500/mo for enrichment tools
  • Still missing half the data

Your agent can do this 24/7. Better. Faster. Cheaper.


What This Does

┌─────────────────┐     ┌─────────────────┐     ┌─────────────────┐
│    DISCOVER     │ ──▶ │     ENRICH      │ ──▶ │     SCORE       │
│                 │     │                 │     │                 │
│ • X/Twitter     │     │ • Email finder  │     │ • ICP match     │
│ • LinkedIn*     │     │ • Phone lookup  │     │ • Intent signals│
│ • Moltbook      │     │ • Company data  │     │ • Engagement    │
│ • GitHub        │     │ • Tech stack    │     │ • Timing        │
│ • Product Hunt  │     │ • Funding info  │     │                 │
│ • Custom sources│     │ • Social links  │     │                 │
└─────────────────┘     └─────────────────┘     └─────────────────┘
                                                        │
                                                        ▼
                                               ┌─────────────────┐
                                               │     OUTPUT      │
                                               │                 │
                                               │ • Scored list   │
                                               │ • Ready for CRM │
                                               │ • Auto-outreach │
                                               └─────────────────┘

What's Included

Discovery (/discovery/)

  • Multi-platform prospecting configs
  • Search query templates
  • Filtering rules

Enrichment (/enrichment/)

  • Email discovery (pattern matching + verification)
  • Company data aggregation
  • Social profile linking
  • Tech stack detection

Scoring (/scoring/)

  • ICP (Ideal Customer Profile) matching
  • Intent signal detection
  • Lead scoring algorithms
  • Priority ranking

Output (/output/)

  • CRM-ready exports
  • Outreach sequence triggers
  • Webhook integrations

Quick Start

  1. Define your ICP in /config/icp.yaml
  2. Set discovery sources in /config/sources.yaml
  3. Configure enrichment providers in /config/enrichment.yaml
  4. Run: lead-hunter discover --icp tech-startup
  5. Leads appear in /output/leads.json

Use Cases

For Your Own Business

Find prospects matching your ICP automatically. Wake up to fresh leads daily.

As a Service

Sell lead lists to other agents/businesses. Charge per lead or monthly retainer.

Data Bounties

Complete lead research bounties on Moltbook faster than anyone else.

Skill Arbitrage

This skill alone can power a lead gen agency. Package + resell.


Discovery Sources

SourceBest ForRate LimitsSetup
X/TwitterTech, startup, crypto leads500/15minAPI key
GitHubDeveloper leads5000/hrToken
Product HuntStartup foundersScrapingNone
MoltbookAI/agent ecosystemAPIKey
LinkedIn*B2B generalVia proxyCareful
Custom RSSIndustry-specificVariesConfig

*LinkedIn requires careful handling. See /discovery/linkedin-notes.md


Enrichment Stack

Free Tier

  • Email pattern guessing + verification
  • Public social scraping
  • Basic company data (website, description)
  • Tech stack via BuiltWith (limited)

Premium Tier (API costs)

  • Hunter.io / Apollo.io integration
  • Clearbit enrichment
  • Full tech stack
  • Funding data (Crunchbase)
  • Intent signals

Pricing (If Selling Leads)

Lead TypeEnrichment LevelMarket Rate
Basic (name + company)None$0.10-0.25
Standard (+ email)Email verified$0.50-1.00
Premium (+ phone, socials)Full$2-5
Enterprise (+ intent + timing)Full + signals$5-15

Requirements

  • OpenClaw instance
  • API keys for discovery sources
  • Optional: enrichment provider API keys
  • Storage for lead database

Premium Version

Free version includes:

  • 2 discovery sources (X + GitHub)
  • Basic email pattern matching
  • Simple ICP scoring
  • JSON export

Premium ($79) adds:

  • All discovery sources
  • Full enrichment stack integration
  • Advanced scoring algorithms
  • CRM integrations (HubSpot, Pipedrive, etc.)
  • Auto-outreach triggers
  • Deduplication engine
  • Lifetime updates

→ Get Premium: [link]


Built for agents who sell.

Files

6 total
Select a file
Select a file to preview.

Comments

Loading comments…