← Back to Skills Marketplace
big-roman123

leadklick

by big-roman123 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2152
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install leadklick
Description
Automate lead capture in Supabase with Make.com email workflows, manage lead status, conversations, and track auto-reply delivery.
README (SKILL.md)

Lead Inbox Automator

Capture leads into a centralized Supabase database with automatic Make.com email automation.

Description

This skill provides a complete lead management system for Clawd agents. It stores leads in Supabase, triggers Make.com webhooks for auto-reply emails, and tracks the full conversation lifecycle from "new" to "qualified".

Configuration

{
  "supabaseUrl": "https://your-project.supabase.co",
  "supabaseKey": "eyJ...your-service-role-key",
  "orgId": "550e8400-e29b-41d4-a716-446655440000",
  "defaultPriority": "medium"
}

Important: Use the Service Role Key, not the Anon Key, for full database access.

Actions

createLead

Create a new lead and automatically trigger the automation workflow.

Parameters:

  • email (string, required): Contact email address
  • name (string, optional): Contact person name
  • phone (string, optional): Phone number
  • source (string, optional): Origin channel (default: "clawd_agent")
  • priority (string, optional): "low", "medium", "high", "urgent"
  • custom_fields (object, optional): Any additional data

Returns:

{
  "success": true,
  "lead_id": "uuid",
  "status": "new",
  "automation_triggered": true,
  "message": "Lead captured. Auto-reply will be sent within 60 seconds."
}

Example:

const result = await skill.createLead({
  email: "[email protected]",
  name: "Max Mustermann",
  source: "chat_bot",
  custom_fields: { product: "saas_basic" }
});

getLead

Retrieve lead details including full conversation history.

Parameters:

  • id (string, required): Lead UUID

Returns: Lead object with conversations array and reply_pending boolean.

listLeads

List leads with filtering options.

Parameters:

  • status (string, optional): Filter by status
  • priority (string, optional): Filter by priority
  • limit (number, optional): Max results (default: 50)
  • dateFrom (string, optional): ISO date filter

Returns: Array of leads and total count.

updateStatus

Update lead lifecycle status.

Parameters:

  • id (string, required): Lead UUID
  • status (string, required): "qualified", "won", "lost", etc.
  • notes (string, optional): Qualification notes

addConversation

Add a manual reply or note to the lead thread.

Parameters:

  • leadId (string, required): Lead UUID
  • content (string, required): Message text
  • subject (string, optional): Subject line

getAutomationStatus

Check if the auto-reply email was successfully sent.

Parameters:

  • leadId (string, required): Lead UUID

Returns:

{
  "auto_reply_sent": true,
  "minutes_since_creation": 2,
  "automation_ok": true
}

Usage Flow

  1. Capture: When a user expresses interest, call createLead()
  2. Verify: After 60-120 seconds, call getAutomationStatus() to confirm auto-reply
  3. Qualify: During conversation, update status to "qualified" if interested
  4. Log: Use addConversation() to store your agent responses

Error Handling

Common errors:

  • Invalid email format
  • Duplicate lead (within 24h)
  • Missing Supabase credentials
  • Automation timeout (>5min without reply)

Schema

Leads table:

  • id, email, name, phone, source, status, priority
  • custom_fields (JSON), metadata (JSON)
  • first_reply_sent_at, created_at

Conversations table:

  • id, lead_id, direction (inbound/outbound/automated)
  • content, subject, channel, sent_at

Tags

lead, crm, sales, automation, email, supabase

Version

1.0.0

Usage Guidance
This skill appears to implement the advertised lead-capture functionality, but it asks you to provide a Supabase Service Role Key — a powerful credential that bypasses row-level security. Before installing: 1) Confirm the registry listing (the skill.json/README require secrets even though the top-level metadata omitted them). 2) Prefer giving a least-privilege API key or a dedicated service account with only the required insert/update/select/delete permissions (or an HTTP proxy endpoint) rather than your full Service Role Key. 3) Review and enforce RLS policies on the Supabase project, and audit logs for actions taken by the skill. 4) Verify the external automation endpoints (Make.com / Resend) you'll wire into the workflow and ensure they are trustworthy. 5) If you cannot restrict the Supabase key, do not provide it to untrusted or third-party skills. If you want to be safer, request that the author support scoped keys or an intermediary service that limits operations to only the tables/actions the agent needs.
Capability Analysis
Type: OpenClaw Skill Name: leadklick Version: 1.0.0 The skill requires a Supabase Service Role Key, which grants broad read/write permissions to the entire Supabase project, as explicitly stated in `SKILL.md` and `README.md`. While the skill's TypeScript code (`src/api.ts`) appears to use this key only for its stated purpose of managing leads within specific tables, the underlying credential itself represents a high-risk, broad permission. This aligns with the 'suspicious' classification threshold for risky capabilities without clear malicious intent, specifically 'broad permissions'.
Capability Assessment
Purpose & Capability
The package, SKILL.md, README, and src/api.ts consistently implement a lead-capture/automation integration (Supabase + Make.com). That purpose aligns with the code and declared capabilities. However, the top-level registry metadata showed no required env vars or primary credential while skill.json and README explicitly require a Supabase service-role key and orgId — an inconsistency between the registry listing and the skill's own manifest/docs.
Instruction Scope
Runtime instructions (SKILL.md) and the code stay within the described lead-management scope: create/list/get leads, add conversations, update status, and check automation status. The skill triggers external automation (Make.com / Resend) as part of its flow, which is expected given the stated purpose. The SKILL.md does instruct use of the Supabase Service Role Key for full DB access; it does not instruct reading unrelated files or exfiltrating unrelated data.
Install Mechanism
There is no install script in the registry (instruction-only install), and no arbitrary download URLs. The package.json lists a dependency on @supabase/supabase-js which is expected. Overall install risk is low to moderate (normal npm dependency fetch) — nothing like a remote extract from an untrusted URL.
Credentials
The skill requires a Supabase Service Role Key (skill.json and README) which grants broad admin-level access to the database (bypasses RLS). For an agent-run skill, that is a high-privilege secret. While the skill's operations (insert/delete/update leads) technically need DB write permissions, best practice is least-privilege keys or function-based endpoints. Additionally, the registry-level metadata omitted these required credentials, which is an important mismatch and a red flag for accidental mis-declaration or deliberate omission.
Persistence & Privilege
The skill does not request always:true and does not modify other skills; autonomous invocation is allowed (platform default). Autonomous invocation combined with possession of a Supabase service role key increases potential blast radius — the skill could perform wide-ranging DB changes when invoked by the agent. This is not inherently malicious but is an important operational risk to consider.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install leadklick
  3. After installation, invoke the skill by name or use /leadklick
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Leadklick 1.0.0 – Initial Release - Centralized lead management system using Supabase as the backend. - Automatically triggers Make.com webhooks for auto-reply email automation. - Provides actions to create, retrieve, list, and update leads, plus add conversations and check automation status. - Tracks lead lifecycle from "new" to "qualified" with customizable status and priority. - Includes robust error handling and a detailed schema for leads and conversations.
Metadata
Slug leadklick
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is leadklick?

Automate lead capture in Supabase with Make.com email workflows, manage lead status, conversations, and track auto-reply delivery. It is an AI Agent Skill for Claude Code / OpenClaw, with 2152 downloads so far.

How do I install leadklick?

Run "/install leadklick" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is leadklick free?

Yes, leadklick is completely free (open-source). You can download, install and use it at no cost.

Which platforms does leadklick support?

leadklick is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created leadklick?

It is built and maintained by big-roman123 (@big-roman123); the current version is v1.0.0.

💬 Comments