← Back to Skills Marketplace
xz-cn

Crm

by xz-cn · GitHub ↗ · v0.1.1
cross-platform ⚠ suspicious
1155
Downloads
2
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install clawdbot-crm-skill
Description
Personal CRM for managing contacts, relationships, and follow-ups using markdown files. Use when the user wants to add contacts, track relationships, set fol...
README (SKILL.md)

Personal CRM Skill

Manage contacts, relationships, and follow-ups with markdown files. No database needed.

Setup

Initialize contacts inside memory/ for semantic search integration:

mkdir -p memory/contacts/{people,companies,events,_templates,scripts}
cp skills/crm/assets/templates/*.md memory/contacts/_templates/
cp skills/crm/scripts/*.py memory/contacts/scripts/
clawdbot memory index

Natural Language Input

When user describes a contact naturally, extract and create:

User says: "Met Sarah Lee at Web3 summit. She's head of partnerships at Polygon, based in Dubai. Telegram @sarahlee"

Extract:

name: Sarah Lee
company: Polygon
role: Head of Partnerships
location: Dubai
telegram: "@sarahlee"
met_at: web3-summit
tags: [web3, partnership]

Then run: memory/contacts/memory/contacts/scripts/crm-add.py person "Sarah Lee" --company "Polygon" --role "Head of Partnerships" --location "Dubai" --telegram "@sarahlee" --tags "web3,partnership"

Scripts

All scripts use /usr/bin/python3 and require PyYAML.

Query Contacts

memory/contacts/scripts/crm-query.py --list people          # List all people
memory/contacts/scripts/crm-query.py --tag investor         # Filter by tag
memory/contacts/scripts/crm-query.py --company "Acme"       # Filter by company
memory/contacts/scripts/crm-query.py --introduced-by bob    # Find introductions
memory/contacts/scripts/crm-query.py --location singapore   # Filter by location
memory/contacts/scripts/crm-query.py --search "supply chain" # Full-text search
memory/contacts/scripts/crm-query.py -v                     # Verbose output

Add Contact

memory/contacts/scripts/crm-add.py person "Name" --company "Co" --role "Title" --tags "a,b"
memory/contacts/scripts/crm-add.py company "Company Name" --industry "Tech"
memory/contacts/scripts/crm-add.py event "Event Name" --date 2026-03-15 --location "City"

Update Contact

memory/contacts/scripts/crm-update.py alice-chen --interaction "Called about demo"
memory/contacts/scripts/crm-update.py alice-chen --set-follow-up 2026-02-15
memory/contacts/scripts/crm-update.py alice-chen --add-tag vip
memory/contacts/scripts/crm-update.py alice-chen --touch  # Update last_contact to today

Follow-ups & Reminders

memory/contacts/scripts/crm-followups.py --summary         # Quick summary
memory/contacts/scripts/crm-followups.py --days 7          # Due in 7 days
memory/contacts/scripts/crm-followups.py --dormant 90      # Not contacted in 90 days
memory/contacts/scripts/crm-remind.py contact --in 3d      # Remind in 3 days
memory/contacts/scripts/crm-remind.py --list               # List reminders
memory/contacts/scripts/crm-remind.py --check              # Check due reminders

Import/Export

memory/contacts/scripts/crm-import.py contacts.csv                    # Import CSV
memory/contacts/scripts/crm-import.py contacts.vcf                    # Import vCard
memory/contacts/scripts/crm-import.py linkedin.csv --format linkedin  # LinkedIn export
memory/contacts/scripts/crm-export.py --csv out.csv                   # Export CSV
memory/contacts/scripts/crm-export.py --vcard out.vcf --type people   # Export vCard

Regenerate Index

memory/contacts/scripts/crm-index.py  # Rebuilds contacts/_index.md

Contact Schema

---
name: Alice Chen
type: person  # person | company | event
tags: [investor, crypto]
company: Acme Corp
role: Partner
email: [email protected]
phone: +1-555-0123
telegram: "@alice"
twitter: "@alice"
linkedin: https://linkedin.com/in/alice
location: Singapore
introduced_by: bob-smith  # slug of introducer
met_at: token2049-2025    # slug of event
first_contact: 2025-09-20
last_contact: 2026-01-27
follow_up: 2026-02-15
status: active  # active | dormant | archived
---

# Alice Chen

## Context
Partner at Acme Corp. Met through Bob at Token2049.

## Interactions
- **2026-01-27**: Called about pilot program.
- **2025-09-20**: First met at conference.

## Notes
- Prefers Signal over email

Folder Structure

memory/
└── contacts/             # Inside memory/ for semantic search
    ├── people/           # One file per person
    ├── companies/        # One file per company
    ├── events/           # One file per event
    ├── _templates/       # Templates for new contacts
    ├── _index.md         # Auto-generated lookup table
    ├── .reminders.json   # Reminder data
    └── scripts/          # CLI tools

Cross-References

  • YAML fields: introduced_by: bob-smith, met_at: event-slug
  • Wiki-links in notes: [[bob-smith]], [[acme-corp]]
  • Semantic search: Memory search finds connections in prose

Heartbeat Integration

Add to HEARTBEAT.md:

### CRM Follow-ups (check 1-2x daily)
1. Run: `/usr/bin/python3 contacts/memory/contacts/scripts/crm-followups.py --summary`
2. Run: `/usr/bin/python3 contacts/memory/contacts/scripts/crm-remind.py --check`
If there are due items, notify the user.

Tips

  • Use --dry-run on import to preview before creating files
  • Run crm-index.py after bulk changes to update the index
  • Tags are lowercase, comma-separated
  • Slugs are auto-generated from names (lowercase, hyphenated)
  • For natural language input, extract fields and use crm-add.py
Usage Guidance
This skill appears to do what it claims: a local markdown-based CRM implemented by included Python scripts. Before installing, do the following: 1) Review and fix the documented paths in SKILL.md (there are copy-paste duplications like memory/contacts/memory/contacts/ and inconsistent Heartbeat paths). 2) Place the scripts under memory/contacts/scripts (as the setup describes) so their relative CONTACTS_DIR resolves correctly. 3) When importing data, use --dry-run first to confirm results. 4) Only enable the Heartbeat/periodic checks if you want automated runs — otherwise run followups/remind manually. 5) Ensure memory/contacts isn't unintentionally synced to remote/shared storage (these files contain personal contact data). 6) Verify the manifest/signature if you need cryptographic assurance (README provides steps). If you want, run the tools in a sandbox or test workspace first.
Capability Analysis
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The skill contains several vulnerabilities that could be exploited. The `scripts/crm-index.py` script allows arbitrary file writes via an unvalidated `--output` argument, posing a critical risk for overwriting sensitive system files (e.g., `~/.bashrc`, `~/.ssh/authorized_keys`) and potential remote code execution. The `scripts/crm-export.py` script also allows writing to the user's home directory, which is a significant vulnerability. Furthermore, `scripts/crm-add.py` and `scripts/crm-import.py` are vulnerable to YAML injection due to insecure frontmatter construction, which could corrupt contact files. The `SKILL.md` also highlights a prompt injection vector where the AI agent constructs shell commands from user input, which could lead to shell injection if the agent's input sanitization is insufficient.
Capability Assessment
Purpose & Capability
The skill is a markdown-based personal CRM and the included Python scripts implement adding, querying, importing/exporting, indexing, follow-ups and reminders via local file operations. There are no requests for unrelated credentials, network endpoints, or system-level privileges—capabilities requested match the stated purpose.
Instruction Scope
SKILL.md instructs copying templates and scripts into memory/contacts and running the CLI tools. The scripts operate on local files under CONTACTS_DIR (derived from __file__), which is consistent with the copy instructions. However the documentation has some copy-paste/path errors (e.g., 'memory/contacts/memory/contacts/scripts/...' duplication and inconsistent example paths in Heartbeat lines). Heartbeat instructions propose periodic execution of followup/reminder scripts — that is expected for reminder functionality but you should explicitly opt-in and confirm the paths are correct before enabling automation.
Install Mechanism
This is an instruction-only skill (no install spec). Code files are included in the package; there are no external downloads or extracted archives referenced. No package manager installs or remote code pulls are performed by the skill itself.
Credentials
The skill declares no required environment variables or external credentials. Scripts only read and write local markdown and index files and use PyYAML (yaml). The export tool validates output paths to prevent arbitrary workspace escapes (allows workspace, /tmp, or home), which is reasonable for export features. No secret exfiltration or unrelated env access is present.
Persistence & Privilege
always:false and no install-time persistence is requested. The skill recommends adding checks to HEARTBEAT.md for periodic runs (1–2x daily), which would cause automated executions if the user opts in. Autonomous invocation by the model is the platform default; combined with Heartbeat-style automation this means scripts could run on a schedule if you enable that — confirm you want periodic checks before adding them.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clawdbot-crm-skill
  3. After installation, invoke the skill by name or use /clawdbot-crm-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
- Added MANIFEST.md file to the project. - Updated documentation in README.md and SKILL.md; no functionality changes. - No breaking changes or new features introduced.
v0.1.0
- Initial release of the crm skill: a personal CRM for managing contacts, relationships, and follow-ups using markdown files, no database required. - Supports natural language input to add contacts, with field extraction and command-line script usage. - Includes scripts for adding, updating, querying, importing, exporting contacts, and managing reminders/follow-ups. - Uses a folder structure under memory/contacts/ with dedicated subfolders for people, companies, and events. - Provides sample YAML schema, template structure, and instructions for integration with semantic search and heartbeat checks.
Metadata
Slug clawdbot-crm-skill
Version 0.1.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Crm?

Personal CRM for managing contacts, relationships, and follow-ups using markdown files. Use when the user wants to add contacts, track relationships, set fol... It is an AI Agent Skill for Claude Code / OpenClaw, with 1155 downloads so far.

How do I install Crm?

Run "/install clawdbot-crm-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Crm free?

Yes, Crm is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Crm support?

Crm is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Crm?

It is built and maintained by xz-cn (@xz-cn); the current version is v0.1.1.

💬 Comments