📦 Lead Generation Pipeline — 智能获客
v1.0.0一键调用，6个智能体自动完成行业调研、企业挖掘与个性化外联，全程无需人工干预。
0· 84·0 当前·0 累计
by 下载技能包
最后更新
2026/4/2
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill points your agent at an external paid API that returns personal contact data. Before installing, get answers to: (1) Who operates https://gateway.mcfagentic.com? Is there a verifiable homepage, company, or privacy policy? (2) Exactly how is the x402 payment supplied and authorized — does the gateway require you to expose wallet private keys or sign requests client-side? (3) What are the terms of use and data retention/privacy policies — will lead/contact data be stored, shared, or res...详细分析 ▾
ℹ 用途与能力
The SKILL.md is an API-style spec for an external lead-generation service — that aligns with the name/description. However the skill advertises an 'autonomous 6-agent pipeline' but provides no code (it relies on an external gateway), and it requires payment for endpoints even though the registry metadata declares no required credentials or primary credential. That mismatch between 'requires payment' and 'no declared auth' is an incoherence.
ℹ 指令范围
The instructions only describe calling external endpoints; they do not instruct reading local files or environment variables. However the pipeline expects and returns potentially sensitive personal contact data (emails, phones) and research summaries — so using it will transmit business/people data to the external gateway. The SKILL.md does not specify what input is sent, nor any redaction/privacy behavior.
✓ 安装机制
Instruction-only skill with no install spec and no bundled code. This minimizes local install risk because nothing is written or executed locally by the skill itself.
⚠ 凭证需求
No environment variables or credentials are declared, yet the documentation states that all endpoints 'require x402 payment (USDC on Base L2)'. There is no explanation of how payment/auth is provided (wallet signing, API key, OAuth, on-chain callback), which is a material omission. The skill also will cause external transmission of lead/contact data — the privacy implications are not documented.
✓ 持久化与权限
always is false and the skill does not request persistent privileges. It does allow autonomous invocation (platform default), which increases blast radius if the external service is untrusted, but that's expected for skills and not a standalone disqualifier.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install mcf-lead-gen-pipeline
镜像加速npx clawhub@latest install mcf-lead-gen-pipeline --registry https://cn.longxiaskill.com镜像同步中