Icp Qualifier
v1.0.2Qualify DTC Shopify leads for Visual Dept by scoring against ICP criteria including US location, niche, visual quality, revenue, and contact info for priorit...
⭐ 1· 1.6k·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and SKILL.md describe scoring leads against Visual Dept's ICP and the instructions (review website, Instagram, find contact info, verify US location) match that purpose. Minor metadata inconsistencies (registry version 1.0.2 vs package.json/skill.yaml 1.0.0, no homepage) reduce provenance but do not contradict the stated functionality.
Instruction Scope
Runtime instructions require web research (site/Shopify indicators, Instagram follower counts, contact emails). This is coherent for lead qualification, but it implies the agent will collect publicly available contact details (names/emails) — a privacy consideration. The SKILL.md does not instruct reading any local files or using unrelated credentials.
Install Mechanism
No install spec and no code files beyond the SKILL.md, package.json, and skill.yaml — low risk: nothing will be written to disk or downloaded by the skill itself.
Credentials
The skill declares no required environment variables, binaries, or config paths. It also does not ask for unrelated secrets or credentials; this is proportionate to its stated public-research purpose.
Persistence & Privilege
always is false and there is no behavior that writes persistent configuration or modifies other skills. The skill can be invoked normally by the agent; autonomous invocation is allowed by platform default and is not excessive here.
Assessment
This skill is internally consistent and appears to only direct the agent to look up public website and social profile information and score leads. Before installing, consider: (1) do you want an agent autonomously collecting public contact details (names/emails)? Ensure this aligns with your privacy and compliance rules; (2) confirm the agent has only browsing/search capabilities and is not allowed to send outreach messages or exfiltrate data to unknown endpoints; (3) note the package/metadata lack a homepage and have a small version mismatch — if provenance matters, ask the publisher for clearer identity or documentation; (4) don't provide unrelated credentials to this skill (none are required). If those points are acceptable, the skill is coherent for its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk976zbwb2xehhz5dxagc80w9yd80kv26
License
MIT-0
Free to use, modify, and redistribute. No attribution required.