ClawHub

Norman: Manage Clients

v1.0.0

Manage business clients - list, search, create, or update client information. Use when the user mentions clients, contacts, customers, Kunden, or needs to ma...

⭐ 0· 542·0 current·0 all-time
byStan Kharlap@stanlee000
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the instructions: all runtime steps are client-management actions (list_clients, create_client, get_client, update_client). The SKILL.md also declares an openclaw metadata dependency on an MCP named 'norman-finance', which is consistent with a finance/client management skill.
✓
Instruction Scope
Instructions are narrowly scoped to collecting and presenting client data and calling the listed client APIs. They do not ask the agent to read local files, environment variables, system config, or send data to unrelated external endpoints. The guidance to ask about German-specific tax status is appropriate for a client-management tool that supports German customers.
✓
Install Mechanism
No install spec and no code files — this is instruction-only, so nothing will be downloaded or written to disk by the skill itself. That is the lowest-risk install posture.
✓
Credentials
The skill declares no required environment variables or credentials in the registry metadata. The only dependency is a metadata reference to an MCP ('norman-finance'), which plausibly provides the actual API access; no excessive or unrelated secrets are requested.
✓
Persistence & Privilege
always is false and the skill does not request to modify system or other skills' configuration. It does not ask for persistent presence or elevated privileges.
Assessment
This skill appears internally consistent and low-risk: it simply instructs the agent how to manage client records and references an external MCP (norman-finance) to perform those actions. Before installing, confirm you trust the provider that implements the 'norman-finance' capability (the SKILL.md lists https://norman.finance) because the actual client data access will come from that integration. Also consider privacy implications: the skill will handle PII (names, emails, phones, tax IDs), so verify logging, storage, and access controls for the backing integration and avoid giving it more credentials than necessary. Finally, note a minor metadata mismatch: the registry lists no homepage while the SKILL.md includes https://norman.finance — you may want to verify that domain and the MCP provider are legitimate.

Like a lobster shell, security has layers — review code before you run it.

clientsvk979kn5qh5jsvk7v3rb3h2hd7n81e9f9crmvk979kn5qh5jsvk7v3rb3h2hd7n81e9f9financevk979kn5qh5jsvk7v3rb3h2hd7n81e9f9latestvk979kn5qh5jsvk7v3rb3h2hd7n81e9f9mcpvk979kn5qh5jsvk7v3rb3h2hd7n81e9f9normanvk979kn5qh5jsvk7v3rb3h2hd7n81e9f9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

👥 Clawdis

Comments