LeadGenerator

AdvisoryAudited by Static analysis on May 3, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could rely on fabricated business contacts for sales outreach or reporting, leading to wasted effort or misleading outputs.

Why it was flagged

The source says it simulates a company database and constructs contact fields, while SKILL.md says it searches companies and fetches contact data. Users may treat generated leads as real verified company records when they are synthetic.

Skill content
# Symulacja bazy firm - w prawdziwej wersji byłoby API
...
email = f"biuro@{industry_key.lower().replace(' ', '')}{i+1}.pl"
Recommendation

Clearly label the data as synthetic/demo data unless a real, disclosed data source is added; users should independently verify any generated leads.

What this means

A user could be directed to an external payment process not governed by ClawHub protections.

Why it was flagged

The skill asks users to arrange payment through an email-supplied link outside the registry. This is disclosed, but the payment flow is not verifiable from the artifacts.

Skill content
**Jak wykupić?** Wyślij maila na tomaszpedzierski.infinity@wp.pl — odpowiem z linkiem do płatności.
Recommendation

Verify the seller and payment destination before paying or sharing personal/payment information.