← Back to Skills Marketplace
aiwithabidi

Hunter

by aiwithabidi · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
435
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install hunter
Description
Hunter.io — email finder, email verifier, domain search, author finder, and lead management.
README (SKILL.md)

🔍 Hunter.io

Hunter.io — email finder, email verifier, domain search, author finder, and lead management.

Requirements

Variable Required Description
HUNTER_API_KEY Hunter.io API key

Quick Start

# Find emails for a domain
python3 {{baseDir}}/scripts/hunter.py domain-search --domain \x3Cvalue> --limit "10" --type \x3Cvalue>

# Find specific person's email
python3 {{baseDir}}/scripts/hunter.py email-finder --domain \x3Cvalue> --first-name \x3Cvalue> --last-name \x3Cvalue>

# Verify an email address
python3 {{baseDir}}/scripts/hunter.py email-verifier --email \x3Cvalue>

# Count emails for domain
python3 {{baseDir}}/scripts/hunter.py email-count --domain \x3Cvalue>

# List saved leads
python3 {{baseDir}}/scripts/hunter.py list-leads --limit "20" --offset "0"

# Create a lead
python3 {{baseDir}}/scripts/hunter.py create-lead --email \x3Cvalue> --first-name \x3Cvalue> --last-name \x3Cvalue> --company \x3Cvalue>

# Update a lead
python3 {{baseDir}}/scripts/hunter.py update-lead \x3Cid> --email \x3Cvalue> --first-name \x3Cvalue> --last-name \x3Cvalue>

# Delete a lead
python3 {{baseDir}}/scripts/hunter.py delete-lead \x3Cid>

# List lead lists
python3 {{baseDir}}/scripts/hunter.py list-leads-lists

# Get account info & usage
python3 {{baseDir}}/scripts/hunter.py get-account

# Find author of article
python3 {{baseDir}}/scripts/hunter.py author-finder --url \x3Cvalue>

Output Format

All commands output JSON by default.

Script Reference

Script Description
{baseDir}/scripts/hunter.py Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Usage Guidance
This skill appears to implement Hunter.io API calls and only needs your HUNTER_API_KEY. Before installing: (1) confirm you trust the publisher (agxntsix.ai / M. Abidi); (2) be aware the script will try to read a workspace .env file (~/.openclaw/workspace/.env or $WORKSPACE/.env) if HUNTER_API_KEY is not set — review that file for other secrets or remove unrelated secrets from it; (3) consider creating a scoped/limited Hunter API key for this use and monitor its usage; (4) note the script has some minor bugs in how it builds query parameters (these are functional issues, not obviously malicious). If you need guaranteed minimal surface, run the script manually from a controlled environment or set HUNTER_API_KEY explicitly in the environment rather than relying on the .env fallback.
Capability Analysis
Type: OpenClaw Skill Name: hunter Version: 1.0.0 The skill is classified as suspicious due to a URL parameter injection vulnerability found in `scripts/hunter.py`. User-controlled inputs (such as `domain`, `email`, `url`, and `id`) are directly inserted into the API path using string replacement (e.g., `path.replace('{domain}', str(args.domain or ''))`) before the full URL is properly encoded. This allows an attacker to inject additional query parameters, potentially altering the intended API request to `https://api.hunter.io/v2` in unintended ways. While the skill's overall purpose aligns with its description and it correctly retrieves the `HUNTER_API_KEY` from expected locations, this input sanitization flaw represents a significant vulnerability rather than clear malicious intent.
Capability Assessment
Purpose & Capability
Name/description, declared HUNTER_API_KEY, and the included Python CLI all align with Hunter.io functionality. The script targets the official Hunter API (https://api.hunter.io) and the requested credential (HUNTER_API_KEY) is appropriate.
Instruction Scope
SKILL.md instructs running the provided script only, but the script's get_env() falls back to reading a workspace .env file (~/.openclaw/workspace/.env or WORKSPACE/.env) to locate HUNTER_API_KEY. That file read is not documented in SKILL.md and is scope creep — the skill will access a local file the user may not expect.
Install Mechanism
No install spec (instruction-only plus an included stdlib Python script). Nothing is downloaded or written to disk by an install step.
Credentials
Only HUNTER_API_KEY is declared (and is the primary credential), which is appropriate. However the code also reads WORKSPACE and a local .env file as a fallback. That implicit access to a local .env could expose other secrets if users keep multiple credentials there; WORKSPACE is not declared as required.
Persistence & Privilege
The skill is not always:true, does not request persistent system-wide changes, and does not modify other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hunter
  3. After installation, invoke the skill by name or use /hunter
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Hunter skill. - Supports Hunter.io's email finder, email verifier, domain search, author finder, and lead management via CLI. - Uses a single Python 3.10+ script with no external dependencies required. - All outputs are in JSON format. - Requires a HUNTER_API_KEY environment variable for authentication. - Includes commands for account info, adding/updating/deleting leads, and other Hunter.io features.
Metadata
Slug hunter
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Hunter?

Hunter.io — email finder, email verifier, domain search, author finder, and lead management. It is an AI Agent Skill for Claude Code / OpenClaw, with 435 downloads so far.

How do I install Hunter?

Run "/install hunter" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hunter free?

Yes, Hunter is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Hunter support?

Hunter is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hunter?

It is built and maintained by aiwithabidi (@aiwithabidi); the current version is v1.0.0.

💬 Comments