Lead Researcher

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you connect external search or enrichment accounts, the skill may use those accounts, quotas, and permissions while researching leads.

Why it was flagged

The skill may rely on third-party service accounts or API keys for search and enrichment. That is aligned with lead research, but it is still delegated account/API access that should be scoped.

Skill content
- Web search capability (Brave API or similar)
- Optional: LinkedIn/Apollo for enrichment (if configured)
Recommendation

Use dedicated, least-privilege API keys where possible, avoid sharing personal session cookies, and review the permissions and terms for any enrichment provider you configure.

What this means

Lead criteria, company names, and contact details may be processed by third-party services used for search or enrichment.

Why it was flagged

The described workflow can involve sending search criteria and lead details through external web/social search or enrichment providers. This is expected for the purpose, but the exact provider data boundary depends on the user's configuration.

Skill content
1. **Search** - Monitors web/social for companies mentioning pain points you target
2. **Enrich** - Extracts company name, decision maker, contact info
Recommendation

Only configure providers you trust, avoid submitting sensitive internal targeting lists unless intended, and verify enriched contact details before using them for outreach.