← Back to Skills Marketplace
atyachin

Lead Generation

by Avital Yachin · GitHub ↗ · v2.2.0
cross-platform ⚠ suspicious
3595
Downloads
13
Stars
14
Active Installs
8
Versions
Install in OpenClaw
/install lead-generation
Description
Lead Generation — Find high-intent buyers in live Twitter, Instagram, and Reddit conversations. Auto-researches your product, generates targeted search queries, and discovers people actively looking for solutions you offer. Social selling and prospecting powered by 1.5B+ indexed posts via Xpoz MCP.
README (SKILL.md)

Lead Generation

Find high-intent buyers from live social conversations.

Discovers leads expressing problems your product solves, complaining about competitors, or actively seeking solutions across Twitter, Instagram, and Reddit.

Setup

Run xpoz-setup skill. Verify: mcporter call xpoz.checkAccessKeyStatus

3-Phase Process

Phase 1: Product Research (One-Time)

Ask for product reference (website/GitHub/description). Use web_fetch/web_search to research. Build profile: product info, target audience, pain points, competitors, keywords. Validate with user.

Generate 12-18 queries across:

  1. Pain point queries — people expressing problems
  2. Competitor frustration — complaints about alternatives
  3. Tool/solution seeking — "recommend..."
  4. Industry discussion — target audience

Save to data/lead-generation/product-profile.json and search-queries.json.

Phase 2: Lead Discovery (Repeatable)

mcporter call xpoz.getTwitterPostsByKeywords query="GENERATED_QUERY" startDate="DATE"
mcporter call xpoz.checkOperationStatus operationId="op_..." # Poll every 5s
mcporter call xpoz.getTwitterUsersByKeywords query="..." # Find people

Repeat for Instagram/Reddit.

Phase 3: Scoring & Output

Score (1-10):

  • Explicitly asking for solution: +3
  • Complaining about competitor: +2
  • Project blocked by pain: +2
  • Active in target community: +1
  • High engagement (>10 likes/5 comments): +1
  • Recent (\x3C48h): +1
  • Profile matches ICP: +1
  • Selling competing solution: -3

Tiers: 8-10 Hot, 6-7 Warm, 5 Watchlist

Deduplicate via data/lead-generation/sent-leads.json (key: {platform}:{author}:{post_id}).

Output: Username, quote, URL, score, why fit, outreach draft, engagement, timestamp.

Outreach:

"I had the same problem! Ended up using [Product] — it does [capability]. [URL]
(Disclosure: I work with [Product])"

Tips

  • Save profile once, reuse daily
  • Quality > quantity
  • Always disclose affiliations
  • Draft only; user reviews/sends
Usage Guidance
Before installing: 1) Inspect the 'mcporter' npm package (npmjs page, GitHub source, recent maintainer activity) to ensure it comes from a trusted publisher. 2) Confirm xpoz-setup's OAuth flow and what tokens/permissions it grants; avoid providing unrelated credentials. 3) Be aware the skill will save lead data locally under data/lead-generation—plan for sensitive-data handling, retention, and deletion. 4) Consider legal/compliance implications of scraping/engaging users on social platforms and the content of outreach messages (spam/GDPR). 5) If possible, test in an isolated environment or sandbox and limit autonomous invocation until you trust the package and remote host (mcp.xpoz.ai).
Capability Analysis
Type: OpenClaw Skill Name: lead-generation Version: 2.2.0 The skill is classified as suspicious due to its reliance on an external npm package (`mcporter`) specified in `SKILL.md`'s install instructions, which introduces a supply chain risk. Furthermore, the skill instructs the agent to execute shell commands (`mcporter call ...`) with agent-generated content (`GENERATED_QUERY`). This pattern, while part of the skill's stated purpose, creates a potential shell injection vulnerability if the agent's execution environment does not properly sanitize the generated query before execution. There is no evidence of intentional malice, but these capabilities present significant security risks.
Capability Assessment
Purpose & Capability
Name/description (social lead discovery via Xpoz MCP) aligns with required binary (mcporter), the declared network host (mcp.xpoz.ai) and the SKILL.md calls (mcporter call xpoz.*). The dependency on an xpoz-setup skill for OAuth is coherent with needing user authorization to query Xpoz.
Instruction Scope
Instructions stay within the stated purpose (product research via web_search/web_fetch, generate queries, call mcporter to fetch platform posts, score and deduplicate, produce outreach drafts). They instruct the agent to write files under data/lead-generation and to use web fetching for product research — both reasonable for this task but worth noting because they create local artifacts and cause the agent to fetch external webpages.
Install Mechanism
Install spec uses npm to install a package named 'mcporter' which provides the mcporter binary. npm installs are common but carry moderate risk because published packages can contain arbitrary code; there are no direct downloads from untrusted URLs or archives, but you should verify the package's provenance (npm page, GitHub repo, maintainer) before installing.
Credentials
The skill does not request unrelated environment variables or credentials in its manifest. Authentication is delegated to an xpoz-setup skill (OAuth 2.1), which is proportionate for a service that queries social/post index data.
Persistence & Privilege
always:false (no forced global persistence). The skill will write persistent artifacts (product-profile.json, search-queries.json, sent-leads.json) under data/lead-generation and may be invoked autonomously by the agent (default). Consider that stored lead lists may contain personal data and that autonomous invocation + network access increases operational risk if you don't trust the mcporter package or Xpoz service.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install lead-generation
  3. After installation, invoke the skill by name or use /lead-generation
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.2.0
Added setup section
v2.1.1
Trimmed SKILL.md
v2.1.0
Auto-install mcporter
v2.0.0
v2
v1.3.0
Consolidated from social-lead-gen: renamed to lead-generation, added mcporter provenance
v1.2.0
Fix security scan: added data handling & privacy section, clarified local storage location, documented that outreach is draft-only, added mcporter provenance
v1.1.0
Fix security scan: corrected skill name, added mcporter provenance, documented network access and data handling
v1.0.0
Find high-intent leads from live Twitter, Reddit, Instagram conversations.
Metadata
Slug lead-generation
Version 2.2.0
License
All-time Installs 14
Active Installs 14
Total Versions 8
Frequently Asked Questions

What is Lead Generation?

Lead Generation — Find high-intent buyers in live Twitter, Instagram, and Reddit conversations. Auto-researches your product, generates targeted search queries, and discovers people actively looking for solutions you offer. Social selling and prospecting powered by 1.5B+ indexed posts via Xpoz MCP. It is an AI Agent Skill for Claude Code / OpenClaw, with 3595 downloads so far.

How do I install Lead Generation?

Run "/install lead-generation" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Lead Generation free?

Yes, Lead Generation is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Lead Generation support?

Lead Generation is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Lead Generation?

It is built and maintained by Avital Yachin (@atyachin); the current version is v2.2.0.

💬 Comments