Explorium AgentSource
v1.0.3B2B prospecting via Explorium AgentSource API. Requires EXPLORIUM_API_KEY. Find companies, prospects, enrich with firmographics/contacts, track events, expor...
⭐ 1· 449·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is a wrapper around Explorium's AgentSource API for prospecting; requesting an EXPLORIUM_API_KEY, installing a local CLI, writing temp result files, and calling https://api.explorium.ai/v1/ are all consistent with that purpose.
Instruction Scope
SKILL.md instructs the agent to discover and run the included agentsource CLI, parse queries into filters, call autocomplete when required, and read CLI-produced temp files. It explicitly warns not to request users' API keys in chat and treats query logging (--call-reasoning) as opt-in. The instructions do not ask for unrelated system data or credentials.
Install Mechanism
Install is an included setup.sh that copies the bundled CLI into ~/.agentsource/bin/ and optionally saves the API key to ~/.agentsource/config.json; there are no external downloads or extracts. This is a low-risk, transparent install mechanism.
Credentials
The code and SKILL.md require a single credential (EXPLORIUM_API_KEY) which is proportionate to the functionality. Note: the top-level registry summary listed "Required env vars: none", but plugin.json and SKILL.md both declare EXPLORIUM_API_KEY as required — this metadata mismatch is an inconsistency to be aware of.
Persistence & Privilege
The skill does write its own files under the user's home (~/.agentsource/) and uses /tmp for results, which is reasonable for a CLI plugin. It does not request always:true, does not modify other skills, and stores the API key only optionally (config file created with mode 600).
Assessment
This skill appears to do what it says: it installs a local CLI, requires an Explorium API key, and calls https://api.explorium.ai/v1/. Before installing, verify you trust the package owner (no homepage provided in the registry listing), confirm that EXPLORIUM_API_KEY is the only credential you must provide, and be aware the installer will create ~/.agentsource/ and may save your key to ~/.agentsource/config.json (permission 600). If you have concerns, run setup.sh and the CLI in an isolated environment (container or VM) first, review bin/agentsource.py yourself (it uses only stdlib and writes /tmp result files), and avoid pasting your API key into chat — use environment variables or the local config command as documented. Also note the registry metadata mismatch about required env vars; prefer the plugin files (plugin.json / SKILL.md) as the source of truth.Like a lobster shell, security has layers — review code before you run it.
Companiesvk9791b17v1v74tb69qd98esnk182r6dkagentsourcevk9791b17v1v74tb69qd98esnk182r6dkcontact datavk9791b17v1v74tb69qd98esnk182r6dkcontactsvk9791b17v1v74tb69qd98esnk182r6dkenrichmentvk9791b17v1v74tb69qd98esnk182r6dkenrichments events companies prospects leadsvk97azj271c3vh64repvr1k166581vq1cexploriumvk9791b17v1v74tb69qd98esnk182r6dkfirmographicsvk9791b17v1v74tb69qd98esnk182r6dkintent datavk9791b17v1v74tb69qd98esnk182r6dklatestvk9791b17v1v74tb69qd98esnk182r6dklead generationvk9791b17v1v74tb69qd98esnk182r6dktechnographicsvk9791b17v1v74tb69qd98esnk182r6dk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.