Mini Crm
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only CRM skill is coherent and purpose-aligned, but it is meant to handle customer contact and sales data that users should store carefully.
This appears safe to install as an instruction-only CRM helper. Before using it, decide where customer records and reports will be stored, avoid entering unnecessary personal data, and make sure any shared reports do not expose private customer or revenue information.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Customer contact details, sales status, budgets, and revenue information could be exposed if the user stores them in an unsafe workspace or shares reports too broadly.
The skill's CRM data structure includes customer contact details, budgets, and interaction history, indicating that the agent may be asked to store or reuse sensitive customer and business context.
"wechat": "zhang123", "email": "zhang@abc.com", "budget": 50000, "interactions": [...]
Use this skill only with customer data you are allowed to process, and keep CRM records in a storage location with appropriate access controls and retention practices.
