SMB Sales Boost — B2B Lead Database of SMBs for Cold Outreach & GTM

Query and manage leads from the SMB Sales Boost B2B lead database. Search newly registered businesses, filter by location/industry/keywords, export leads, ma...

This skill appears to do what it claims: it needs your SMB_SALES_BOOST_API_KEY to call the API and will save exported lead files (which contain PII) to disk. Before installing or using it: 1) Only provide a key you trust to this skill and avoid embedding a long-lived key in shared environments; 2) Override the default output directory (--output-dir) to a secure location you control and clean exports when done; 3) Always confirm with the agent before performing purchases or exports that consume credits (the API can create real Stripe checkout sessions and charges); 4) Be mindful of rate limits and credit usage (new leads and exports may incur costs); 5) Note the skill source is listed as unknown and there is no homepage—if provenance matters, obtain the skill from a known/published provider or inspect the code yourself before use.

Type: OpenClaw Skill Name: smb-sales-boost-leads Version: 1.9.0 The skill bundle provides a legitimate and well-documented interface for the SMB Sales Boost B2B lead generation service. The included Python client (smb_api.py) is written with security best practices, specifically implementing safeguards against path traversal (via os.path.basename and extension allowlisting) and shell injection (by using the requests library for structured API calls). The SKILL.md instructions provide clear guidance for the AI agent, including explicit requirements to obtain user confirmation before executing financial transactions (Stripe charges) or handling PII, and it contains no evidence of malicious intent, data exfiltration, or prompt injection attacks.