get-some-leads
v1.0.0Create and manage Instantly.ai email campaigns via API. Use when the user wants to create a cold email campaign, add leads to Instantly, configure email sequ...
⭐ 0· 96·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim building and managing Instantly.ai campaigns; the only required credential is INSTANTLY_API_KEY and the SKILL.md documents Instantly API endpoints — this is proportionate and coherent.
Instruction Scope
The runtime instructions only describe constructing API requests to api.instantly.ai (creating campaigns, declaring variables, adding leads, activating campaigns). They do not instruct reading unrelated files, other env vars, or sending data to other endpoints. The header note that the skill 'triggers on any mention...' is a routing hint but does not expand the agent's access scope.
Install Mechanism
No install spec and no code files — instruction-only skill. There is nothing written to disk or downloaded during install, which minimizes risk.
Credentials
Only INSTANTLY_API_KEY is required (declared as primary). This is appropriate. The SKILL.md lists possible API scopes and includes very broad scopes (e.g., 'all:all'); users should prefer least-privilege scopes (campaigns:create, leads:create) when issuing the key.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent system privileges or to modify other skills. Autonomous invocation is allowed by platform default but not elevated by this skill.
Assessment
This is an instruction-only adapter for Instantly.ai and appears internally consistent. Before installing: (1) only provide an INSTANTLY_API_KEY with the minimum scopes needed (prefer campaign/lead-specific scopes instead of 'all:all'); (2) be aware that the skill will send lead data (personal data) to Instantly — confirm this complies with your privacy policies and GDPR/other laws as applicable; (3) consider whether you want the skill to be allowed to invoke autonomously (platform default) because it could create/activate campaigns if triggered; (4) rotate and monitor the API key and audit Instantly account activity. If you need higher assurance, request the skill author supply an explicit list of required API scopes and example responses for safety testing.Like a lobster shell, security has layers — review code before you run it.
latestvk97c8669rmwbk88ag7zzbe3d2n8347zw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvINSTANTLY_API_KEY
Primary envINSTANTLY_API_KEY