← Back to Skills Marketplace
capt-marbles

Attio

by captmarbles · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2369
Downloads
2
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install attio
Description
Attio CRM integration for managing companies, people, deals, notes, tasks, and custom objects. Use when working with Attio CRM data, searching contacts, managing sales pipelines, adding notes to records, creating tasks, or syncing prospect information.
README (SKILL.md)

Attio CRM

Manage Attio CRM via REST API. Supports companies, people, deals, lists (pipelines), notes, and tasks.

Setup

Set ATTIO_API_KEY in environment or ~/.env:

echo "ATTIO_API_KEY=your_api_key" >> ~/.env

Get your API key: Attio → Workspace Settings → Developers → New Access Token

Quick Reference

Objects (Records)

# List/search records
attio objects list                     # List available objects
attio records list \x3Cobject>            # List records (companies, people, deals, etc.)
attio records search \x3Cobject> \x3Cquery>  # Search by text
attio records get \x3Cobject> \x3Cid>        # Get single record
attio records create \x3Cobject> \x3Cjson>   # Create record
attio records update \x3Cobject> \x3Cid> \x3Cjson>  # Update record

Lists (Pipelines)

attio lists list                       # Show all pipelines/lists
attio entries list \x3Clist_slug>         # List entries in a pipeline
attio entries add \x3Clist_slug> \x3Cobject> \x3Crecord_id>  # Add record to pipeline

Notes

attio notes list \x3Cobject> \x3Crecord_id>  # Notes on a record
attio notes create \x3Cobject> \x3Crecord_id> \x3Ctitle> \x3Ccontent>

Tasks

attio tasks list                       # All tasks
attio tasks create \x3Ccontent> [deadline]  # Create task (deadline: YYYY-MM-DD)
attio tasks complete \x3Ctask_id>         # Mark complete

Examples

Find a company and add a note

# Search for company
attio records search companies "Acme"

# Add note to the company (using record_id from search)
attio notes create companies abc123-uuid "Call Notes" "Discussed Q1 roadmap..."

Work with pipeline

# List pipeline stages
attio entries list sales_pipeline

# Add a company to pipeline
attio entries add sales_pipeline companies abc123-uuid

Create a follow-up task

attio tasks create "Follow up with John at Acme" "2024-02-15"

API Limits

  • Rate limit: ~100 requests/minute
  • Pagination: Use limit and offset params for large datasets

Full API Docs

https://docs.attio.com/

Usage Guidance
This skill appears to be an Attio CRM helper, but there are several mismatches you should resolve before installing or using it: - The SKILL.md asks for ATTIO_API_KEY and shows echoing it into ~/.env, but the skill metadata lists no required env vars. Ask the publisher to declare ATTIO_API_KEY (and required scopes) explicitly. - The instructions assume an 'attio' CLI is present, yet no required binaries or install steps are provided. Confirm where that CLI comes from and prefer an official install method (e.g., official docs or a vetted package) before running commands. - Avoid blindly running the provided echo >> ~/.env line; storing API keys in files can leak them if the file is world-readable or backed up. Prefer setting the env variable in a secure credential store or add it to a properly permissioned file and understand token scopes and expiry. - Verify the skill's source and homepage (none provided here). If this came from an unknown author, request provenance or a link to official code/docs. If you proceed, only provide a minimally scoped Attio token, confirm the 'attio' CLI origin, and do not run install or file-edit commands until you review them.
Capability Analysis
Type: OpenClaw Skill Name: attio Version: 1.0.0 The skill bundle is benign. It provides documentation for an Attio CRM integration, detailing how to set up an API key and use a hypothetical `attio` CLI tool to manage CRM data. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All instructions are clearly aligned with the stated purpose of integrating with Attio CRM.
Capability Assessment
Purpose & Capability
The skill's name, description, and instructions all describe Attio CRM operations (records, notes, tasks) which is coherent. However, the runtime instructions require an ATTIO_API_KEY and assume an 'attio' CLI is available, while the skill metadata lists no required environment variables and provides no required binaries or install spec — that mismatch is unexpected and incoherent.
Instruction Scope
The SKILL.md instructs the agent/user to set ATTIO_API_KEY (including an example echo to ~/.env) and to run the 'attio' CLI for searches and writes. Writing credentials to ~/.env and invoking a CLI are outside the skill metadata (no config paths or binaries declared). The actual API calls are within the stated purpose, but the guidance to modify ~/.env and reliance on an undeclared CLI expand the real scope.
Install Mechanism
There is no install specification and no code files (instruction-only), yet the instructions repeatedly call a local 'attio' command-line tool. The skill does not declare that binary as required nor provide an installation method — this is a practical incoherence (the commands may fail) and a transparency gap about what will run on the host.
Credentials
The SKILL.md explicitly requires an ATTIO_API_KEY (and even shows how to append it to ~/.env), but the registry metadata listed no required env vars or primary credential. Requesting a single API key for Attio is proportionate to the purpose, but the missing declaration and the instruction to store the key in a file without guidance on scopes/permissions or secure handling is concerning.
Persistence & Privilege
The skill does not request always:true and does not claim other elevated privileges. However, the instructions recommend writing the API key into ~/.env, which is a persistent change to user files. This is not necessarily malicious but should be disclosed and handled securely; the skill metadata does not list this config path.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install attio
  3. After installation, invoke the skill by name or use /attio
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Attio CRM integration for companies, people, deals, notes, tasks, and pipelines
Metadata
Slug attio
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Attio?

Attio CRM integration for managing companies, people, deals, notes, tasks, and custom objects. Use when working with Attio CRM data, searching contacts, managing sales pipelines, adding notes to records, creating tasks, or syncing prospect information. It is an AI Agent Skill for Claude Code / OpenClaw, with 2369 downloads so far.

How do I install Attio?

Run "/install attio" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Attio free?

Yes, Attio is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Attio support?

Attio is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Attio?

It is built and maintained by captmarbles (@capt-marbles); the current version is v1.0.0.

💬 Comments