High Intent Leads
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only lead-generation skill is coherent, but it relies on third-party scraping/video services and user-supplied API tokens that should be scoped and reviewed.
Before using this skill, review the full SKILL.md, provide only scoped/revocable Apify and InVideo tokens, keep searches limited, verify third-party costs and terms, and ensure your lead collection and outreach comply with privacy and anti-spam rules.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may guide use of tools that scan many companies or public posts, which can consume credits and collect more prospect data than intended if the user gives broad criteria.
The skill explicitly relies on multiple scraping and enrichment tools to gather lead signals. This is aligned with lead generation, but users should control scope and comply with provider/platform rules.
Apify — LinkedIn Jobs Scraper ... LinkedIn Post Scraper ... Crunchbase Scraper ... Twitter/X Scraper ... Google News Scraper ... Wappalyzer
Set narrow ICP, geography, lookback_days, and max_leads limits; review platform terms and outputs before using the leads.
A provided Apify or InVideo token could spend account credits or access provider account resources if mishandled.
The skill asks the user to provide external service credentials. These credentials are purpose-aligned, but the registry metadata declares no primary credential or required environment variables.
"production": { "invideo_api_key": "YOUR_INVIDEO_API_KEY" }, "apify_token": "YOUR_APIFY_TOKEN"Use scoped or temporary tokens where possible, avoid pasting unrelated credentials, and revoke tokens after use if they are not needed.
Your ICP, offer details, competitor list, and prospect data may be processed by outside providers.
The described workflow sends lead-generation inputs and generated outreach context through third-party services. This is disclosed and purpose-aligned, but it is still an external data flow.
Powered by: [Apify] + [InVideo AI] + Claude AI
Do not include confidential customer data, trade secrets, or sensitive personal data unless you have reviewed the providers' privacy and data-retention terms.
Marketing language may encourage over-trust in the workflow or its advertised cost and effectiveness.
The skill uses strong promotional and cost-saving claims. This does not show malicious behavior, but users should independently verify costs, compliance, and usefulness.
Every B2B sales team, agency, SaaS company, and consultant on earth needs this... under $2 per run.
Treat performance and pricing claims as promotional; verify provider pricing, legal compliance, and outreach quality before relying on it.