Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lead Enrichment Pipeline

v1.2.3

Automated lead capture, deduplication, tracking, and notification pipeline. Captures leads from web forms via webhooks, deduplicates by email in Google Sheet...

0· 403·1 current·1 all-time
byMuhammad H.M. Alvi@mhmalvi
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the contents: included workflows implement webhooks → dedupe → Google Sheets → email notifications. Required resources (n8n credentials for Google Sheets and SMTP) are exactly what this purpose needs.
Instruction Scope
SKILL.md and included workflow JSON stay within the stated purpose. Workflows reference an on-disk file (/home/node/.n8n-files/YOUR_LEAD_MAGNET.pdf) for the lead-magnet PDF and expect you to replace multiple YOUR_* placeholders. Webhooks in the workflows are public endpoints as-exported and are not protected by auth — the newsletter workflow includes a basic IP-based rate limiter (uses forwarded IP headers which can be spoofed in some setups). These are operational considerations rather than hidden behaviors.
Install Mechanism
Instruction-only skill with no install spec and no code files to run locally — lowest-risk install posture. The workflows are plain n8n JSON exports.
Credentials
The skill does not request any environment variables, system credentials, or unrelated config paths. The only credentials it requires are Google Sheets OAuth2 and SMTP inside n8n, which are appropriate and declared as placeholders in the instructions.
Persistence & Privilege
always is false and the skill does not request any platform-level persistence or attempt to modify other skills or system settings. Workflows are meant to be imported into the user's n8n instance and use credentials the user provisions there.
Assessment
This skill appears coherent and implements what it claims, but review and configure before use: 1) Replace all YOUR_* placeholders and create the Google Sheets OAuth2 and SMTP credentials inside your own n8n instance (do not paste production credentials into third-party exports). 2) Place the lead magnet PDF at the indicated path on your n8n host or change the file node to a location you control. 3) Secure your webhook endpoints — exported workflows as-is will accept unauthenticated POSTs; add authentication tokens, IP allowlists, or n8n webhook authentication if you need protection. 4) The newsletter rate limiter is a simple, header-based approach and can be bypassed in some deployments; consider stronger throttling or bot protection. 5) Check privacy/legal (consent, retention, GDPR) for captured lead data and limit access to the Google Sheet and SMTP credentials. If you want more assurance, ask the author for a signed source/homepage or run the workflows in an isolated n8n sandbox before connecting production credentials.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎯 Clawdis
OSLinux · macOS · Windows
latestvk97as3g78m3nngmjwccz7zf85d82759d
403downloads
0stars
6versions
Updated 8h ago
v1.2.3
MIT-0
Linux, macOS, Windows

Lead Capture & Tracking Pipeline 🎯

Capture leads from any source, deduplicate by email, score by intent, track in Google Sheets, and notify your team — all automatically via n8n workflows.

Problem

Leads come from multiple sources (website forms, newsletters, strategy calls, product waitlists). Manually entering them into a CRM and following up is error-prone and slow. Hot leads go cold.

This pipeline captures, deduplicates, scores, and routes leads in real-time.

What It Does

  1. Capture — Receives leads from webhooks (website forms, landing pages, chatbots)
  2. Deduplicate — Checks Google Sheets for existing leads (email match via appendOrUpdate)
  3. Score — Basic lead scoring based on source type and engagement signals
  4. Store — Appends to Google Sheets with scoring data
  5. Notify — Emails team with lead details and suggested next action

Note: This pipeline does not include third-party enrichment integrations (e.g., Clearbit, FullContact). To add enrichment, insert an HTTP Request node between the webhook and the Sheets node in the workflow, calling your preferred enrichment API.

Included Workflows

#FilePurpose
1lead-tracker.jsonWebhook → deduplicate → store in Sheets → notify owner
2lead-magnet.jsonLead magnet download → store lead → send PDF attachment email
3newsletter.jsonNewsletter signup → store subscriber → send welcome email

Architecture

Lead Source (form, chatbot, API)
    │
    ▼
Webhook Endpoint (n8n)
    │
    ├── Validate required fields (name, email)
    ├── Check for duplicates (email match in Sheets)
    │
    ├── IF new lead:
    │   ├── Score lead (source type + available fields)
    │   ├── Append to Google Sheets
    │   └── Send notification email to team
    │
    └── IF existing lead:
        ├── Update engagement count
        └── Log new touchpoint

Required n8n Credentials

You must create these credentials in your n8n instance before importing:

Credential TypeUsed ForPlaceholder in JSON
Google Sheets OAuth2Reading/writing lead dataYOUR_GOOGLE_SHEETS_CREDENTIAL_ID
SMTP (Gmail or custom)Sending notification and welcome emailsYOUR_SMTP_CREDENTIAL_ID

After importing, open each workflow and reconnect the credential nodes to your own credentials.

Configuration Placeholders

Replace these placeholders in the workflow JSON before deploying:

PlaceholderDescription
YOUR_LEADS_SHEET_IDYour Google Sheet ID for lead tracking
YOUR_GOOGLE_SHEETS_CREDENTIAL_IDYour n8n Google Sheets credential ID
YOUR_SMTP_CREDENTIAL_IDYour n8n SMTP credential ID
YOUR_FROM_EMAILSender email address
YOUR_NOTIFICATION_EMAILWhere to send lead notifications
YOUR_NAMEYour name for email templates
YOUR_DOMAINYour website domain for email links

Supported Lead Sources

SourceWebhook PathFields
Newsletter signup/webhook/newsletteremail
Lead magnet download/webhook/lead-magnetname, email, company
Strategy call booking/webhook/strategy-callname, email, phone, company, message
Product waitlist/webhook/product-waitlistname, email
Contact form/webhook/contactname, email, subject, message
Custom/webhook/add-lead-enrichedAny JSON payload

Google Sheets Schema

ColumnTypeDescription
nametextFull name
emailtextEmail address (primary key for dedup)
companytextCompany name
phonetextPhone number
sourcetextWhere they came from
scorenumberLead score (0-100)
statustextnew / contacted / qualified / converted
created_atdateFirst captured
updated_atdateLast activity
touchpointsnumberTotal interactions
notestextAdditional notes

Quick Start

1. Prerequisites

  • n8n v2.4+ (self-hosted or cloud)
  • Google Sheets API credentials (OAuth2)
  • SMTP email credentials (Gmail or custom)

2. Create Tracking Sheet

Set up a Google Sheet with the columns above. Enable appendOrUpdate matching on email column to prevent duplicates.

3. Import Workflows

Import the 3 JSON files from the workflows/ directory into n8n. Replace all YOUR_* placeholders with your actual values.

4. Test

curl -X POST https://your-n8n.com/webhook/add-lead-enriched \
  -H "Content-Type: application/json" \
  -d '{
    "name": "John Doe",
    "email": "john@company.com",
    "company": "Acme Inc",
    "source": "website-contact"
  }'

Lead Scoring

FactorPointsExample
Source: Strategy call+40High intent
Source: Lead magnet+25Medium intent
Source: Newsletter+10Low intent
Has company name+10B2B signal
Has phone number+15Ready to talk
Repeat visitor+10 per touchpointEngaged

Use Cases

  1. Freelancers — Track inbound leads from website contact forms
  2. Agencies — Multi-source lead capture with team notifications
  3. SaaS — Waitlist management with scoring
  4. Content creators — Newsletter subscriber tracking with engagement scoring
  5. eCommerce — Customer inquiry pipeline

Requirements

  • n8n v2.4+ (self-hosted or cloud)
  • Google Sheets OAuth2 credentials
  • SMTP email credentials

Comments

Loading comments...