Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lead Researcher

v1.0.0

Automated lead research and enrichment for B2B sales. Finds companies matching your criteria, enriches with contact data, and generates personalized outreach messages.

2· 1.9k·3 current·3 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for rjrileybuisness-ai/lead-researcher.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Lead Researcher" (rjrileybuisness-ai/lead-researcher) from ClawHub.
Skill page: https://clawhub.ai/rjrileybuisness-ai/lead-researcher
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install lead-researcher

ClawHub CLI

Package manager switcher

npx clawhub@latest install lead-researcher
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill advertises full lead enrichment (finding contacts, emails, scoring, outreach) yet includes no code or declared environment variables to perform enrichment or contact resolution. The included research.sh only constructs and prints a search query; it does not call web APIs, third-party enrichment services, or perform scraping. This is disproportionate to the claimed capability.
Instruction Scope
SKILL.md tells the agent to 'monitor web/social' and optionally use LinkedIn/Apollo but is vague about exact APIs, endpoints, or whether the agent should scrape sites. It does not instruct reading local files or unrelated environment variables, but its broad language gives the agent wide discretion to perform network scraping or lookups if implemented later.
Install Mechanism
There is no install spec. The only shipped code is a small, non-executing Bash script that builds and echoes queries. Nothing is written to disk beyond the provided files and no remote downloads or extracts are present.
Credentials
No credentials or env vars are declared, yet the skill explicitly mentions optional LinkedIn/Apollo enrichment (which normally requires API keys/accounts). The absence of declared required credentials reduces transparency and is a mismatch, but not necessarily malicious.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not request or claim any elevated platform privileges or persistent system modifications.
What to consider before installing
This skill's description promises automated enrichment but the shipped files do not implement it. Before installing or running: (1) Ask the publisher which APIs/endpoints the skill will call and what credentials are required; preferred skills explicitly list required env vars and endpoints. (2) Do not give account credentials until you verify the integration and trust the source. (3) Be aware that performing scraping/LinkedIn lookups can violate terms of service and privacy laws; ensure compliance. (4) If you test it, do so in a sandboxed environment and monitor outbound network traffic to confirm where data is sent. (5) Prefer skills that provide concrete implementation or documented, well-known API usage (e.g., official provider domains) rather than vague instructions that grant the agent broad discretion.

Like a lobster shell, security has layers — review code before you run it.

latestvk970ttyce3yw4pj88j16javmv580y0sj
1.9kdownloads
2stars
1versions
Updated 6h ago
v1.0.0
MIT-0

Lead Researcher

Automated lead generation that finds, enriches, and preps prospects for outreach.

What It Does

  1. Search - Monitors web/social for companies mentioning pain points you target
  2. Enrich - Extracts company name, decision maker, contact info
  3. Score - Ranks leads by fit and urgency
  4. Outreach - Drafts personalized messages referencing their specific needs

Quick Start

Find 10 e-commerce brands complaining about low conversion rates on TikTok
Research SaaS companies hiring for customer support roles (growth signal)
Find real estate agents in [city] who don't have video content

Parameters

The skill accepts these in natural language:

  • industry - Target industry (real estate, e-commerce, SaaS, coaching, etc.)
  • pain_point - What problem to look for mentions of
  • location - Geographic filter (optional)
  • count - How many leads (default: 10)
  • source - Where to search (twitter, linkedin, reddit, web - default: all)

Output Format

Returns a structured lead list:

{
  "leads": [
    {
      "company": "Acme Corp",
      "contact": "Jane Smith, CMO",
      "email": "jane@acme.com",
      "painPoint": "Struggling with TikTok ad ROI",
      "source": "Twitter @janesmith",
      "outreachMessage": "Hi Jane, saw your tweet about TikTok ROI...",
      "score": 85
    }
  ]
}

Use Cases

  • Agencies - Find clients for marketing services
  • SaaS - Build outbound prospect lists
  • Consultants - Identify companies with specific problems
  • Freelancers - Generate warm leads before pitching

Tips

  • Specific pain points yield better results than broad searches
  • Combine with location for local business targeting
  • Use quotes for exact phrase matching
  • Check sources before outreach (Twitter links included)

Example Prompts

Find 15 coaches who mentioned needing help with content creation
Research 20 local businesses in Austin TX that don't have websites
Find e-commerce brands that posted about cart abandonment issues

Requirements

  • Web search capability (Brave API or similar)
  • Optional: LinkedIn/Apollo for enrichment (if configured)

Built by Jarvis - 24/7 Operator Support: Check ClawHub for updates

Comments

Loading comments...