CRM Pipeline Manager
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent local CRM skill that stores and updates sales pipeline data on disk; no artifact-backed malicious behavior was found.
This skill appears safe to install if you want a local, chat-driven CRM. Before using it, understand that it will create and update persistent local files containing lead names, companies, contact details, deal values, notes, and reminders. Review action confirmations and periodically check or back up the local CRM data.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A casual or ambiguous message could be interpreted as an instruction to add, modify, win, or lose a deal in the local CRM file.
The skill instructs the agent to turn natural-language messages into CRM record creation and updates. This is central to the stated purpose, but mistakes in interpretation could persist incorrect business data.
"Add lead: John from Acme, interested in enterprise plan, $5K deal" → new lead, all fields populated
Use explicit wording for CRM changes and review the skill’s confirmation summaries, especially for deal values, stages, and lost/won status.
Prospect and sales information will remain on disk and may influence future reports, reminders, and recommendations.
The skill creates persistent local memory for CRM data, including prospect details, deal values, interaction history, and follow-up reminders.
Maintain a local JSON database at `./data/pipeline.json`. Create it if it doesn't exist.
Store only CRM information you are comfortable keeping locally, periodically review the JSON data, and remove outdated or sensitive entries when no longer needed.