Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

sales-intelligence-outreach

v1.0.0

AI销售情报与客户触达助手 — 智能检索目标客户信息、生成个性化销售文案、一键发布至多个社交平台,实现销售线索发掘到首次触达的全流程自动化

0· 39·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zlszhonglongshen/sales-intelligence-outreach.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "sales-intelligence-outreach" (zlszhonglongshen/sales-intelligence-outreach) from ClawHub.
Skill page: https://clawhub.ai/zlszhonglongshen/sales-intelligence-outreach
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install sales-intelligence-outreach

ClawHub CLI

Package manager switcher

npx clawhub@latest install sales-intelligence-outreach
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md claims full pipeline abilities (search/scrape LinkedIn/Weibo/小红书, generate images, and publish to accounts). Those actions normally require API keys, account credentials, or browser automation tooling. The package declares no required env vars, credentials, binaries, or install steps and has no source/homepage; this mismatch between claimed capabilities and declared requirements is suspicious.
Instruction Scope
The instructions stay within the advertised sales-intelligence/outreach scope (search, analyze, generate content, publish). They do not instruct reading local files or exfiltrating arbitrary system data. However they are high-level and delegate key actions to other named skills (Agent-Reach, nano-banana-pro, xiaohongshu-mcp, 公众号助手) without specifying how credentials/access are obtained, validated, or limited — leaving runtime behavior ambiguous.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk by this package itself, so install risk from bundled code is low. Actual runtime risk depends on the other skills it orchestrates.
!
Credentials
The workflow requires posting to multiple platforms and scraping third-party sites, which in practice requires credentials or tokens (API keys, account logins) and possibly third-party service configuration. The skill declares no required environment variables or primary credential. This omission is a proportionality/information gap: either required secrets will be requested at runtime by other skills, or the orchestration assumes implicitly present credentials — both are potential security surprises for users.
Persistence & Privilege
always:false and no install; the skill does not request persistent/system-wide privileges itself. Autonomous invocation is allowed (platform default) — note: if other installed skills have autonomous posting capabilities, combined behavior could have greater impact, but that is not inherent to this instruction-only bundle.
Scan Findings in Context
[NO_SCAN_FINDINGS] expected: No code files present; regex-based scanner had nothing to analyze. For instruction-only skills this is expected, but it means behavioral risk must be judged from SKILL.md and referenced external skills.
What to consider before installing
This skill is an orchestration recipe that delegates scraping and posting to other named skills (Agent-Reach, nano-banana-pro, xiaohongshu-mcp, 公众号助手). Before installing or using it: 1) Ask where those sub-skills come from and inspect their source, install specs, and required credentials — those are the components that will actually access accounts and network resources. 2) Do not provide sensitive credentials until you verify how they are stored and used; prefer temporary/sandbox accounts for testing. 3) Confirm compliance with platform terms and local privacy laws for scraping and unsolicited outreach. 4) Test in a controlled environment to see what prompts or credential requests appear at runtime. 5) If you expect automatic posting, require explicit runtime confirmation for each publish action to avoid unintended broadcasts. If you cannot verify the provenance of the referenced sub-skills or how credentials are handled, treat this skill as potentially risky.

Like a lobster shell, security has layers — review code before you run it.

latestvk97apfb3fenwr76635yb7p2dys85j4v9
39downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Sales Intelligence & Outreach Combo

概述

本 Combo 整合三大核心能力:销售情报检索 → 个性化文案生成 → 多平台精准触达,将传统需要数小时手动操作的客户开发流程,压缩为 AI 自动执行的端到端工作流。

适用于 B2B 销售团队、外贸业务员、销售创业者,帮助快速建立高质量潜在客户列表并完成首次触达。


工作流程

┌──────────────────────────────────────────────────────────────┐
│                    Sales Intelligence Pipeline                │
│                                                              │
│  ① 情报检索                                                  │
│     Agent-Reach → 搜索目标客户/公司/行业新闻                  │
│     ↓                                                        │
│  ② 情报分析 & 客户档案生成                                   │
│     AI 分析客户背景、痛点、近期动态                           │
│     ↓                                                        │
│  ③ 个性化文案生成                                            │
│     nano-banana-pro → 生成专属销售素材(图片+文案)          │
│     ↓                                                        │
│  ④ 多平台精准触达                                           │
│     Agent-Reach → 小红书/微信文章/LinkedIn 发布               │
│     xiaohongshu-mcp → 小红书精准种草                         │
│     公众号助手 → 微信公众号深度文章                          │
└──────────────────────────────────────────────────────────────┘

模块说明

模块一:销售情报检索(Agent-Reach)

能力:

  • 全网搜索目标客户公司、行业动态、关键决策人
  • 抓取公司最近的新闻、融资动态、产品发布
  • LinkedIn / 微博 / 小红书 多平台情报收集

触发方式:

搜索 [客户名称/行业] 最近的新闻动态
查找 [公司名] 的决策人信息
搜集 [行业] 最近的热点事件

模块二:客户画像分析与文案生成(nano-banana-pro)

能力:

  • 根据客户情报生成个性化销售图片素材
  • 批量生成多款风格不同的销售钩子图
  • 支持赛博朋克、Mac Pro、知识卡片等多种风格

触发方式:

生成[行业]销售钩子图
为[客户]制作一张[风格]风格的触达素材

模块三:多平台精准触达

平台与工具:

平台工具用途
小红书xiaohongshu-mcp种草笔记、案例分享
微信公众号公众号助手深度文章、价值输出
LinkedInAgent-ReachB2B专业触达
微博Agent-Reach热点借势营销

触发方式:

发布小红书种草内容
发布公众号文章
在LinkedIn发布[内容]

典型使用场景

场景一:B2B 外贸客户开发

用户:「帮我找10家做智能家居的海外品牌,做一套开发信素材」
AI 执行:
  1. Agent-Reach 搜索 "smart home brands 2025" / 行业展会名单
  2. 抓取各公司官网最新产品动态
  3. nano-banana-pro 生成10张风格统一的销售钩子图
  4. 生成对应个性化开发信文案
  5. 发布至小红书记录过程 + 微信群发触达

场景二:销售朋友圈素材自动化

用户:「搜集本周新能源行业热点,生成一套朋友圈素材」
AI 执行:
  1. Agent-Reach 搜索本周新能源行业热点新闻
  2. nano-banana-pro 生成5张热点借势海报
  3. 搭配文案一键发布至小红书/微信朋友圈

场景三:客户首次触达全流程

用户:「帮我触达这家AI公司,我可以给他们提供什么服务」
AI 执行:
  1. Agent-Reach 深入调研目标公司(融资、产品、团队)
  2. 分析对方可能的痛点和服务切入点
  3. nano-banana-pro 生成触达专用知识卡片
  4. 生成个性化邮件/微信话术
  5. 提供可直接使用的触达文案

使用限制与注意事项

  • 发布前请务必检查生成内容是否符合平台社区规范
  • 涉及联系方式和隐私信息时,请遵守当地法律法规
  • 建议结合实际业务场景调整文案,不要直接照搬 AI 生成内容
  • 不同平台有不同的内容策略,建议针对平台特性调整风格

技能编排

技能作用
Agent-Reach全网情报检索、多平台内容发布
nano-banana-pro个性化销售素材图片生成
xiaohongshu-mcp小红书内容发布与互动
公众号助手微信公众号深度内容创作

Comments

Loading comments...