LeadGenerator
PassAudited by VirusTotal on May 3, 2026.
Overview
Type: OpenClaw Skill Name: leadgen-b2b Version: 2.1.0 The skill bundle is a B2B lead generation tool that procedurally generates synthetic data based on user input. The Python script (lead_generator.py) is self-contained, using hardcoded dictionaries and loops to create mock company profiles; it lacks any network, file system, or shell execution capabilities. While SKILL.md includes a solicitation for a paid 'PRO' version via email, there is no evidence of malicious intent, data exfiltration, or prompt injection. A minor coding error (undefined variable 'suffixes' on line 105) exists in the lead generation logic, but it is a functional bug rather than a security risk.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could rely on fabricated business contacts for sales outreach or reporting, leading to wasted effort or misleading outputs.
The source says it simulates a company database and constructs contact fields, while SKILL.md says it searches companies and fetches contact data. Users may treat generated leads as real verified company records when they are synthetic.
# Symulacja bazy firm - w prawdziwej wersji byłoby API
...
email = f"biuro@{industry_key.lower().replace(' ', '')}{i+1}.pl"Clearly label the data as synthetic/demo data unless a real, disclosed data source is added; users should independently verify any generated leads.
A user could be directed to an external payment process not governed by ClawHub protections.
The skill asks users to arrange payment through an email-supplied link outside the registry. This is disclosed, but the payment flow is not verifiable from the artifacts.
**Jak wykupić?** Wyślij maila na tomaszpedzierski.infinity@wp.pl — odpowiem z linkiem do płatności.
Verify the seller and payment destination before paying or sharing personal/payment information.