← Back to Skills Marketplace
2074
Downloads
6
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install prospector
Description
This skill should be used when the user wants to find leads, prospects, or contacts matching their ICP (Ideal Customer Profile). It searches for companies via Exa and enriches contacts via Apollo, outputting to CSV and optionally syncing to Attio CRM.
MANDATORY TRIGGERS: "find leads", "prospecting", "ICP search", "find contacts", "lead generation", "/prospector"
Usage Guidance
What to consider before installing: 1) Metadata mismatch — the skill's registry metadata lists no required env vars, but the skill needs Exa and Apollo API keys (and optionally Attio). Confirm you understand and accept providing those keys. 2) Inspect the code yourself (scripts/prospector.py) before running: it makes HTTP calls to api.exa.ai, api.apollo.io, and api.attio.com and writes results to ~/Desktop and ~/.config/prospector/config.json. 3) Prefer environment variables over saving keys to disk; if you must save them, verify permissions (the script sets chmod 600). 4) Be cautious about allowing the setup flow to append exports to your shell profile — that modifies files that may be synced/backed up. 5) If you have concerns, run the skill in an isolated environment or VM, or remove the parts that write to your shell profile and config file. 6) If you proceed, ensure API keys have least privilege and can be rotated/revoked easily.
Capability Analysis
Type: OpenClaw Skill
Name: prospector
Version: 1.0.0
The OpenClaw skill 'prospector' is benign. It performs lead generation by interacting with Exa, Apollo, and optionally Attio APIs, saving results to a CSV on the user's Desktop. API keys are handled securely by either reading environment variables or storing them in `~/.config/prospector/config.json` with strict `0o600` file permissions, as explicitly enforced in `scripts/prospector.py` and `commands/setup.md`. All network requests are directed to the legitimate API endpoints of the stated services. The instructions in `SKILL.md` and `commands/setup.md` are clear, directly align with the skill's purpose, and contain no evidence of prompt injection attempts or instructions for unauthorized actions.
Capability Assessment
Purpose & Capability
The skill's name/description (lead discovery via Exa + Apollo, optional Attio sync) matches the runtime actions in SKILL.md and scripts/prospector.py. However, the registry metadata claims no required environment variables or primary credential, while the SKILL.md and prospector.py clearly require PROSPECTOR_EXA_API_KEY and PROSPECTOR_APOLLO_API_KEY (and optionally PROSPECTOR_ATTIO_API_KEY). That discrepancy (metadata omitting required creds) is an incoherence that should be resolved before trusting the skill.
Instruction Scope
Runtime instructions are narrowly focused on collecting ICP answers, calling Exa/Apollo/Attio APIs, exporting CSV to the Desktop, and optionally syncing to Attio. These actions are consistent with the stated purpose. Notable behaviors: the setup flow can write a JSON config to ~/.config/prospector/config.json and offers to append export lines to the user's shell profile (~/.zprofile, ~/.bashrc, etc.). Writing/modifying shell profiles and saving API keys to disk are legitimate for convenience but are higher-impact operations that deserve explicit user consent and inspection.
Install Mechanism
No install spec is provided (instruction-only with included Python script). README recommends installing a single dependency (httpx). There are no downloads from arbitrary URLs or archive extraction. Risk from the install mechanism is low, though the skill includes an executable Python script that will run network calls when invoked.
Credentials
The keys the skill requests (Exa, Apollo, optional Attio) are appropriate for its stated integrations. However, the skill metadata does not declare these required environment variables or primary credential, which is misleading. The skill also offers to persist keys in a local config file and to append them to shell profiles — storing secrets in shell profiles can increase exposure if the profile is synced or backed up. The number and type of credentials requested are proportionate to the task, but lack of explicit declaration in metadata is a red flag.
Persistence & Privilege
The skill does not request always:true and does not autonomously escalate platform privileges. It does persist configuration and keys to ~/.config/prospector/config.json (chmod 600) and can append exports to shell profile files. Those file-write behaviors are normal for CLI tools but constitute persistent changes to the user's environment and should be made explicit to the user before being performed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install prospector - After installation, invoke the skill by name or use
/prospector - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Prospector skill for automated B2B lead generation with Exa and Apollo.
- Supports searching for companies via Exa and enriching contacts via Apollo based on user-defined ICP (Ideal Customer Profile) criteria.
- Outputs results as a CSV file; optionally syncs leads and contacts to Attio CRM if configured.
- Includes guided questionnaire for ICP collection: Industry, Company Size, Funding Stage, Geography, Keywords, and Contact Count.
- Robust setup process with API key management (config file or environment variables).
- Implements step-by-step workflow with error handling and user feedback for missing configuration, invalid keys, and no results.
- Core commands: `/prospector` (main workflow) and `/prospector:setup` (API configuration).
Metadata
Frequently Asked Questions
What is Prospector?
This skill should be used when the user wants to find leads, prospects, or contacts matching their ICP (Ideal Customer Profile). It searches for companies via Exa and enriches contacts via Apollo, outputting to CSV and optionally syncing to Attio CRM. MANDATORY TRIGGERS: "find leads", "prospecting", "ICP search", "find contacts", "lead generation", "/prospector". It is an AI Agent Skill for Claude Code / OpenClaw, with 2074 downloads so far.
How do I install Prospector?
Run "/install prospector" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Prospector free?
Yes, Prospector is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Prospector support?
Prospector is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Prospector?
It is built and maintained by slempiam (@slempiam); the current version is v1.0.0.
More Skills