CRM-in-a-Box

Bootstrap and manage an open, file-based CRM using the CRM-in-a-Box protocol (contacts, pipeline, interactions as NDJSON). Use when setting up a new CRM for...

Security Scan

The skill is an instruction-only, file-based CRM helper whose requirements and instructions match its stated purpose and do not request unrelated credentials or installs.

Purpose & Capability

Name/description describe a file-based CRM protocol and the skill only requires creating/reading/writing NDJSON and a YAML config; all declared and included files align with that purpose.

Instruction Scope

Runtime instructions are limited to creating/copying files, appending JSON lines, and simple local searches using grep/python; they do not request reading unrelated system files, environment variables, or sending data to external endpoints.

Install Mechanism

No install spec or code is present (instruction-only), so nothing is written to disk by an installer and no external archives or unknown URLs are fetched by the skill itself.

Credentials

The skill declares no required environment variables, credentials, or config paths. The simple use of grep and python is proportionate to the described functionality.

Persistence & Privilege

always is false, the skill has no install-time persistence, and its instructions operate on local files within the CRM directory only — no modifications to other skills or system-wide settings are requested.

Assessment

This is an instruction-only skill that manipulates local NDJSON/YAML files (append/search) and is coherent with its CRM purpose. Before installing: confirm you trust the registry owner/source (homepage is missing), ensure the agent will only be allowed to access the intended CRM directory (to avoid accidental exposure of other files), and be aware that contacts stored as plain NDJSON contain PII—use appropriate repository controls, backups, or encryption if needed. Also verify your runtime has grep and python3 if you plan to use the provided one-liners.

CRM-in-a-Box Skill

An open, agent-native CRM protocol. One directory = one CRM. No vendor lock-in.

Files

• contacts.ndjson — one JSON object per line, each a contact/company record
• pipeline.ndjson — deal/opportunity tracking with stages
• interactions.ndjson — append-only log of emails, calls, notes, meetings
• config.yaml — pipeline stages and labels

Bootstrap a New CRM

Copy the baseline files into a company directory:

mkdir -p ./mycompany/crm
cp /path/to/crm-in-a-box/{config.yaml,contacts.ndjson,pipeline.ndjson,interactions.ndjson} ./mycompany/crm/

Or start fresh with empty NDJSON files and the default config.

Contact Schema

{
  "id": "c001",
  "name": "Jane Smith",
  "email": "[e-mail]",
  "company": "Acme Corp",
  "phone": "[phone]",
  "stage": "new",
  "labels": ["hot-lead"],
  "notes": "Referred by John.",
  "created_at": "2026-01-01T00:00:00Z"
}

Pipeline Schema

{
  "id": "p001",
  "contact_id": "c001",
  "stage": "proposal_sent",
  "deal": "Enterprise License",
  "value": 12000,
  "updated_at": "2026-01-15T00:00:00Z"
}

Interaction Schema

{
  "id": "i001",
  "contact_id": "c001",
  "type": "email",
  "summary": "Sent intro email about Denver market sale.",
  "at": "2026-01-15T10:00:00Z"
}

Pipeline Stages (default)

new → contacted → meeting_scheduled → proposal_sent → negotiating → won / lost

Default Labels

hot-lead, warm-lead, cold-lead, referral, conference, inbound, outbound

Agent Instructions

• Log a contact: append a JSON line to contacts.ndjson
• Update a stage: append an updated entry to pipeline.ndjson (keep old entries — append-only)
• Log an interaction: append to interactions.ndjson
• Search contacts: grep -i "name" contacts.ndjson | python3 -m json.tool
• List pipeline: cat pipeline.ndjson | python3 -c "import sys,json; [print(json.dumps(json.loads(l), indent=2)) for l in sys.stdin]"

Forks / Verticals

Fork config.yaml to customize stages and labels for your vertical:

• pm-crm — Property management (tenants, owners, vendors)
• saas-crm — SaaS sales
• realestate-crm — Buyers, sellers, listings
• recruiting-crm — Candidates, jobs, placements

---

Part of the biz-in-a-box family of open protocols.