← Back to Skills Marketplace
380
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install sixtyfour-skill
Description
People and company intelligence via the Sixtyfour AI API. AI research agents that read the live web — not static databases — to return structured, confidence...
Usage Guidance
This skill is coherent with its stated purpose (people/company enrichment) but has some red flags to consider before installing:
- Missing declared credential: The SKILL.md requires an API key (SIXTYFOUR_API_KEY) but the registry metadata does not declare any required env vars or a primary credential. Ask the publisher to add SIXTYFOUR_API_KEY to the skill's declared requirements so your agent can surface the permission request and you can audit it.
- Privacy / webhook risk: Async jobs can POST results to any webhook_url you supply. Those results may contain personal emails and phone numbers. Only configure trusted webhook endpoints and verify legal/privacy compliance (e.g., GDPR) before sending PII to third parties.
- Origin verification: The skill's source is listed as unknown and homepage is missing. Verify that sixtyfour.ai is the legitimate provider (check their docs and contact points) and confirm the publisher identity before trusting API keys or installing into production agents.
- Billing & scope: The docs show per-email/phone costs and free-tier limits. Test with a disposable/test API key or account and monitor usage to avoid unexpected charges.
- Operational controls: If you want tighter control, restrict the skill to manual/user-invocable only (avoid autonomous runs), and consider using a dedicated API key with limited quota/permissions.
If the publisher provides corrected metadata (declaring the API key) and you confirm the upstream service and privacy posture, the skill's behavior is consistent with its purpose; until then proceed cautiously.
Capability Analysis
Type: OpenClaw Skill
Name: sixtyfour-skill
Version: 1.0.0
The skill is classified as suspicious due to the use of `npx -y sixtyfour-mcp` in the `SKILL.md` and `README.md` files for setting up the MCP server. While `npx` is a common way to run CLI tools, it introduces a supply chain risk: if the `sixtyfour-mcp` npm package were compromised, it could lead to arbitrary code execution on the agent's host, with access to the `SIXTYFOUR_API_KEY`. This represents a significant vulnerability rather than direct malicious intent within the skill bundle itself.
Capability Assessment
Purpose & Capability
The SKILL.md and README clearly describe a people/company enrichment API (Sixtyfour.ai) and show curl examples that require an API key (x-api-key / SIXTYFOUR_API_KEY). However, the registry metadata lists no required environment variables or primary credential. That mismatch (the skill needs a secret but doesn't declare it) is an incoherence and should be fixed; otherwise installers may not realize they'll need to provide a sensitive API key or how it's used.
Instruction Scope
Instructions are mostly scoped to calling the external Sixtyfour API (enrich-lead, find-email, find-phone, workflows, async jobs, webhooks). They do not instruct reading local files or unrelated env vars. Two items to note: (1) async endpoints support arbitrary webhook_url values, which can forward enriched results (including emails/phones) to any external endpoint — this is expected for such APIs but is a privacy/exfiltration risk if misconfigured; (2) the SKILL.md instructs sign-up via Google and API key export, but that API key requirement was not declared in metadata.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute, so it does not install binaries or pull external archives. README mentions helper commands (clawhub, npx sixtyfour-mcp) but no install script is included in the package — lower install risk. Confirm that your agent platform does not auto-fetch the 'npx sixtyfour-mcp' package based on the README.
Credentials
The skill requires a single API key at runtime (SIXTYFOUR_API_KEY / x-api-key) per its examples, which is proportionate for an external API integration. However, the metadata omits declaring this required environment variable/primary credential. That omission prevents automated permission prompts and auditing of required secrets. No other credentials are requested, which is appropriate.
Persistence & Privilege
The skill does not request persistent/always-on presence (always: false) and does not modify other skills. It uses standard async webhooks and polling mechanisms. Autonomous invocation is allowed (disable-model-invocation: false) which is normal; consider restricting autonomous use if you want to limit agent-initiated lookups because the skill can query PII on demand.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sixtyfour-skill - After installation, invoke the skill by name or use
/sixtyfour-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Sixtyfour-skill 1.0.0 — initial release
- Provides company and people enrichment via the Sixtyfour AI API, focused on live web research (not static databases).
- Supports endpoints for lead and company enrichment, email and phone finding, lead scoring, natural language and filter-based search, and batch workflows.
- Returns structured, confidence-scored data with customizable fields.
- Offers both synchronous and asynchronous API support with sample payloads, response formats, and setup documentation.
- Targets users needing accurate, up-to-date people/company data for lead enrichment, research, and outreach.
Metadata
Frequently Asked Questions
What is Sixtyfour Skill?
People and company intelligence via the Sixtyfour AI API. AI research agents that read the live web — not static databases — to return structured, confidence... It is an AI Agent Skill for Claude Code / OpenClaw, with 380 downloads so far.
How do I install Sixtyfour Skill?
Run "/install sixtyfour-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Sixtyfour Skill free?
Yes, Sixtyfour Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Sixtyfour Skill support?
Sixtyfour Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Sixtyfour Skill?
It is built and maintained by rxhxm (@rxhxm); the current version is v1.0.0.
More Skills