首页龙虾技能列表 › GoodVerify

GoodVerify

v0.1.0

Verify emails, phones, and addresses using the goodverify CLI. Use when the user asks to verify contact data, check deliverability, validate an address, look...

1· 70·0 当前·0 累计
by @themusicman (Thomas Brewer)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/3/23
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
high confidence
The skill's description matches a contact-verification tool, but the runtime instructions ask for an API key and tell the agent to install a remote script (curl | sh) while the registry metadata claims no credentials or installs — this mismatch and the remote-install instruction are suspicious.
评估建议
What to consider before installing: 1) The skill's metadata omits the API key and CLI dependency described in SKILL.md — treat that as a red flag and ask the publisher to correct the metadata. 2) The SKILL.md recommends running curl ... | sh from a raw GitHub URL; do not run that blindly. Instead, inspect the install.sh content (view the file in the repo or clone the repo), prefer a signed/released package, or ask for an installation method from an official release. 3) Only provide a read-only (...
详细分析 ▾
用途与能力
The SKILL.md describes exactly the expected capabilities (email, phone, address verification) and requires a goodverify CLI and API key — that is coherent with the stated purpose. However, the registry metadata lists no required binaries or environment variables, which contradicts the SKILL.md. The missing declaration of an API credential and CLI requirement is an inconsistency that should be explained.
指令范围
Runtime instructions tell the agent to check/install/configure the goodverify CLI, ask users for API keys/base URL, and run verification and batch commands. While the verification commands themselves are scoped to the purpose, the instructions explicitly recommend executing a remote install script (curl -fsSL https://raw.githubusercontent.com/.../install.sh | sh) — this is an instruction to download and execute arbitrary code. The SKILL.md also mentions sk_* (read-write) keys are required for batch operations; instructing the agent/user to provide such keys without constraints increases risk.
安装机制
There is no formal install spec in registry metadata, but the instructions advise a curl | sh from a raw.githubusercontent.com URL. Downloading and piping a remote install script for execution is higher-risk than using a vetted package release or distribution package. The URL is a direct raw GitHub path rather than a pinned release archive, increasing the risk of tampering or surprise changes.
凭证需求
The registry metadata declares no required environment variables or primary credential, but the SKILL.md clearly requires a goodverify.dev API key and refers to read-write sk_* keys for batches and pk_* read-only keys. This mismatch is significant: the skill will need sensitive API keys to function, but those needs are not declared in metadata. The skill does not request unrelated credentials, but failing to declare the required secret in metadata makes it harder for users to spot and audit.
持久化与权限
The skill itself is instruction-only and not always-enabled; it does not declare privileged persistent behavior. However, the SKILL.md instructs installation of a CLI which would create software on the user's system and persist configuration (including API keys) — an action with lasting effect that the user must explicitly approve. This persistence is not reflected in the registry metadata.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv0.1.02026/3/23

Initial release of GoodVerify skill for contact data verification. - Enables verification of emails, phone numbers, and addresses using the goodverify CLI and API. - Supports commands for single and batch verifications, usage checks, and API health status. - Provides guidance for configuring the CLI with an API key and environment. - Includes response field explanations for each verification type to help interpret results. - Allows output as JSON for easy parsing and automation. - Lists global options and best-practice guidelines.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install goodverify
镜像加速npx clawhub@latest install goodverify --registry https://cn.clawhub-mirror.com

技能文档

Verify emails, phone numbers, and mailing addresses via the goodverify.dev API.

Prerequisites

The goodverify CLI must be installed and configured. Check with:

goodverify --version
goodverify configure --show

If not installed:

curl -fsSL https://raw.githubusercontent.com/agoodway/goodverify_cli/main/install.sh | sh

If not configured, ask the user for their API key and base URL, then:

goodverify configure --env production --url https://goodverify.dev --key 

Commands

Verify Email

Check deliverability, domain MX records, disposable/catch-all/role flags.

goodverify verify email --email user@example.com

Key response fields:

  • deliverability.statusdeliverable, undeliverable, or risky
  • deliverability.reasonaccepted_email, rejected_email, unknown, etc.
  • flags.is_disposable — temporary email service
  • flags.is_catch_all — domain accepts all addresses
  • flags.is_role_account — generic address like info@, support@
  • domain.has_mx_records — domain can receive email

Verify Phone

Check carrier, phone type (mobile/landline/voip), compliance (DNC/TCPA), and formatting.

goodverify verify phone --phone "+15551234567"
goodverify verify phone --phone "5551234567" --country US

Key response fields:

  • valid — whether the number is valid
  • phone_typemobile, landline, voip, toll_free
  • carrier.name — carrier name
  • compliance.dnc — on Do Not Call list
  • compliance.tcpa — TCPA consent required
  • formatted.e164 — standardized format

Verify Address

Standardize, geocode, check deliverability, and find property owners.

Single string:

goodverify verify address --address "123 Main St, Springfield, IL 62701"

Structured fields:

goodverify verify address --street "123 Main St" --city Springfield --state IL --zip 62701

Key response fields:

  • deliverabilitydeliverable, undeliverable, missing_unit
  • standardized_address — USPS-standardized components
  • geo_location — latitude, longitude, accuracy
  • owners — property owner information (name, other addresses, phones, emails)
  • property.type — residential, commercial, etc.

Batch Operations

goodverify batch list                    # List all batch jobs
goodverify batch get --id      # Get batch job details
goodverify batch results --id  # Download results
goodverify batch sample > template.csv   # Get CSV template

Usage & Health

goodverify usage          # Credit balance, plan, rate limits
goodverify health         # API health check (no auth required)

Global Options

All commands accept:

  • --env — use a specific configured environment
  • --key — override API key for this request
  • --url — override base URL for this request
  • --json — output raw JSON (default is pretty-printed)

Guidelines

  • Always use --json when you need to parse the response programmatically
  • For bulk verification, prefer batch commands over looping verify calls
  • Phone numbers should include country code or use --country flag
  • Address verification works best with complete addresses (street, city, state, zip)
  • Check goodverify usage before large batch operations to confirm credit balance
  • sk_ keys are read-write (required for batch). pk_ keys are read-only.
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务