Lensmor Skills Core

PassAudited by ClawScan on May 15, 2026.

Overview

This instruction-only Lensmor bundle is coherent and disclosed, but users should understand that it relies on a separate Lensmor gateway for API calls, uploads, and gated contact/event unlocks.

This skill appears safe to install as an instruction bundle, but review the separate Lensmor gateway plugin, watch for approval prompts before unlocks or uploads, and avoid sharing confidential company details unless you trust Lensmor to process them.

Publisher note

Skill-only bundle. Does not execute code and does not include browser automation, raw Slack API posting, arbitrary local file upload scripts, or credentials. Requires the separate lensmor-gateway plugin for Lensmor tools. This release updates documentation/reference instructions for Lensmor API request shapes and response fields only.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The safety of real API calls and uploads depends partly on the separately installed Lensmor gateway plugin.

Why it was flagged

The reviewed bundle is instruction-only but depends on a separate native plugin that is not included in these artifacts; this is disclosed and central to the stated purpose.

Skill content
For OpenClaw, install it together with the `@lensmor/lensmor-gateway` native plugin so `lensmor_cli` and `lensmor_upload_file` are available.
Recommendation

Install the gateway only from a trusted source and review its permissions and approval behavior before using the skill.

What this means

The agent may query Lensmor on the user's behalf when the workflow calls for it.

Why it was flagged

The skill instructs the agent to make Lensmor API calls through a tool. The use is purpose-aligned and the artifacts describe a precheck gate, but it is still external tool authority users should notice.

Skill content
Read the corresponding reference file, then call `lensmor_cli` using the request shape documented there. Every Lensmor request in this repo goes through the plugin's unified Business `precheck` gate before the raw route executes.
Recommendation

Pay attention to any gateway confirmations, especially before contact unlocks, uploads, or actions that may consume credits.

What this means

Some workflows may use Lensmor account privileges to unlock more event, exhibitor, or contact information.

Why it was flagged

The artifacts describe account-gated unlock behavior for additional results. This appears expected for a Lensmor data product, but it can involve account entitlements or credits.

Skill content
`semantics.unlock.requiredForMoreResults` ... `semantics.unlock.actionType` ... `unlock_event_exhibitors`
Recommendation

Confirm that you understand any unlock or credit cost before approving gated Lensmor actions.

What this means

Company URLs, target-audience descriptions, and related business context may be processed by Lensmor services.

Why it was flagged

The recommendation workflow sends user-provided business context to Lensmor through the gateway/API flow. This is disclosed and relevant to personalized recommendations.

Skill content
`company_url` | Conditional | string | Company website URL. Provide at least one of `company_url` or `target_audience`.
Recommendation

Avoid entering confidential business details unless you are comfortable sharing them with the Lensmor service and its gateway.