← 返回 Skills 市场
concaption

Foxreach

作者 Usama Navid · GitHub ↗ · v0.1.1
cross-platform ⚠ suspicious
779
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install foxreach
功能描述
Manage FoxReach cold email outreach — leads, campaigns, sequences, templates, email accounts, inbox, and analytics. Use when the user asks to create leads, m...
使用说明 (SKILL.md)

FoxReach API Management Skill

You are managing the FoxReach cold email outreach platform through its Python SDK and CLI. This skill covers all API operations for leads, campaigns, sequences, templates, email accounts, inbox, and analytics.

Setup & Authentication

The Python SDK is at integrations/sdk-python/ and the CLI is at integrations/cli/. Both use API key authentication with keys prefixed otr_.

Check if the SDK is available:

python -c "from foxreach import FoxReach; print('SDK ready')"

If not installed, install it:

cd integrations/sdk-python && pip install -e .

Authentication — Always get the API key from the user or environment before making calls. Never hardcode keys. Use environment variable injection:

FOXREACH_API_KEY=otr_... python script.py

Or use the CLI config:

cd integrations/cli && PYTHONPATH=. python -m foxreach_cli.main config set-key --key otr_...

How to Execute Operations

Write inline Python scripts using the SDK. Always follow this pattern:

import json
from foxreach import FoxReach

client = FoxReach(api_key="otr_USER_KEY_HERE")

# ... perform operation ...

client.close()

For quick operations, use one-liners:

python -c "
from foxreach import FoxReach
client = FoxReach(api_key='otr_...')
result = client.leads.list(page_size=10)
for lead in result:
    print(f'{lead.id}  {lead.email}  {lead.status}')
print(f'Total: {result.meta.total}')
client.close()
"

Resource Reference

For complete API details, see api-reference.md. For usage examples of every operation, see examples.md.


Quick Reference — Available Operations

Leads

Action Method Notes
List client.leads.list(page=1, page_size=50, search=..., status=..., tags=...) Paginated, filterable
Get client.leads.get(lead_id) Returns single Lead
Create client.leads.create(LeadCreate(email=..., first_name=..., ...)) Deduplicates by email
Update client.leads.update(lead_id, LeadUpdate(company=..., ...)) Partial update
Delete client.leads.delete(lead_id) Soft-delete

Campaigns

Action Method Notes
List client.campaigns.list(status=...) Filter by draft/active/paused/completed
Get client.campaigns.get(campaign_id) Includes stats
Create client.campaigns.create(CampaignCreate(name=..., ...)) Creates in draft
Update client.campaigns.update(campaign_id, CampaignUpdate(...)) Can't edit if active
Delete client.campaigns.delete(campaign_id) Must be draft
Start client.campaigns.start(campaign_id) Transitions to active
Pause client.campaigns.pause(campaign_id) Pauses sending
Add Leads client.campaigns.add_leads(campaign_id, [lead_ids]) Bulk add
Add Accounts client.campaigns.add_accounts(campaign_id, [account_ids]) Assign senders

Sequences (nested under campaigns)

Action Method Notes
List client.campaigns.sequences.list(campaign_id) All steps
Create client.campaigns.sequences.create(campaign_id, SequenceCreate(body=..., ...)) Add step
Update client.campaigns.sequences.update(campaign_id, seq_id, SequenceUpdate(...)) Edit step
Delete client.campaigns.sequences.delete(campaign_id, seq_id) Remove step

Templates

Action Method Notes
List client.templates.list() Paginated
Get client.templates.get(template_id) Single template
Create client.templates.create(TemplateCreate(name=..., body=...)) New template
Update client.templates.update(template_id, TemplateUpdate(...)) Partial update
Delete client.templates.delete(template_id) Remove

Email Accounts

Action Method Notes
List client.email_accounts.list() Paginated
Get client.email_accounts.get(account_id) With health metrics
Delete client.email_accounts.delete(account_id) Remove

Inbox

Action Method Notes
List Threads client.inbox.list_threads(category=..., is_read=..., ...) Filterable
Get client.inbox.get(reply_id) Full thread
Update client.inbox.update(reply_id, ThreadUpdate(is_read=..., ...)) Mark read/starred

Analytics

Action Method Notes
Overview client.analytics.overview() Dashboard KPIs
Campaign client.analytics.campaign(campaign_id) Metrics + daily stats

Pagination

List endpoints return PaginatedResponse objects:

result = client.leads.list(page=1, page_size=50, search="acme")

# Access data
for lead in result:
    print(lead.email)

# Check pagination info
print(f"Page {result.meta.page}/{result.meta.total_pages}, {result.meta.total} total")

# Get next page
if result.has_next_page():
    next_result = result.next_page()

# Auto-paginate through ALL results
for lead in client.leads.list().auto_paging_iter():
    print(lead.email)

Error Handling

Always wrap API calls in try/except:

from foxreach import FoxReach, NotFoundError, RateLimitError, AuthenticationError, FoxReachError

try:
    lead = client.leads.get("cld_nonexistent")
except NotFoundError:
    print("Lead not found")
except AuthenticationError:
    print("Invalid API key")
except RateLimitError as e:
    print(f"Rate limited. Retry after {e.retry_after}s")
except FoxReachError as e:
    print(f"API error: {e}")

Template Variables & Personalization

Email bodies support variable substitution using {{variable}} syntax:

  • {{firstName}}, {{lastName}}, {{email}}
  • {{company}}, {{title}}, {{phone}}
  • {{website}}, {{linkedinUrl}}
  • Custom fields: {{customFieldName}}

Spintax is also supported: {Hi|Hey|Hello} {{firstName}}


Common Workflows

1. Full Campaign Setup

When the user wants to set up a complete campaign, follow these steps in order:

  1. Create the campaign with campaigns.create()
  2. Add sequence steps with campaigns.sequences.create() for each email in the chain
  3. Add leads with campaigns.add_leads()
  4. Assign email accounts with campaigns.add_accounts()
  5. Start the campaign with campaigns.start()

2. Check Campaign Performance

  1. Get campaign analytics with analytics.campaign(id)
  2. Show sent, delivered, bounced, replied, opened stats
  3. Show reply rate and bounce rate
  4. If daily_stats are available, summarize trends

3. Manage Inbox

  1. List unread threads with inbox.list_threads(is_read=False)
  2. Categorize replies by updating with inbox.update(id, ThreadUpdate(category="interested"))
  3. Common categories: interested, not_interested, out_of_office, wrong_person, unsubscribe

4. Bulk Lead Import

For adding multiple leads, create them one by one (the API deduplicates by email):

leads_data = [
    {"email": "[email protected]", "first_name": "Alice", "company": "Acme"},
    {"email": "[email protected]", "first_name": "Bob", "company": "Beta"},
]
created = []
for data in leads_data:
    lead = client.leads.create(LeadCreate(**data))
    created.append(lead)
    print(f"Created: {lead.id} - {lead.email}")

Important Notes

  • Base URL: https://api.foxreach.io/api/v1
  • Rate limit: 100 requests per minute. The SDK auto-retries on 429.
  • ID prefixes: Leads cld_, Campaigns cmp_, Replies rpl_, Templates tpl_
  • Timezone: All datetimes in UTC ISO 8601 format.
  • Sending days: Array of integers, 1=Monday through 7=Sunday.
  • Sending hours: 0-23 range, in the campaign's timezone.
  • Campaign status flow: draft → active → paused → active → completed
  • Soft deletes: Leads are soft-deleted and can reappear on re-import.
  • Always confirm with the user before destructive operations (delete, start campaign).
  • When listing data, default to showing a formatted summary, not raw JSON.
  • When creating resources, confirm the details with the user before executing.
安全使用建议
This skill appears to be a FoxReach API helper, but it references a local SDK/CLI that aren't included and expects you to provide an API key while not declaring that requirement. Before installing or running it: (1) ask the publisher where the integrations/sdk-python and integrations/cli code come from (a packaged SDK, PyPI name, or GitHub repo); do not run 'pip install -e .' or arbitrary shell commands in unknown directories without reviewing the code; (2) do not paste your production FOXREACH_API_KEY into the environment until you confirm the skill's source and inspect the SDK/CLI code; use a limited-scope or test API key first; (3) prefer a version that declares required env vars and provides a trusted install location (PyPI or GitHub releases) or includes the SDK code in the bundle; (4) if you proceed, review any local files the skill would read and avoid giving the agent carte blanche to search arbitrary system paths. These inconsistencies make the skill suspicious but not (clearly) malicious — request corrected packaging and clearer credential declaration from the author.
功能分析
Type: OpenClaw Skill Name: foxreach Version: 0.1.1 The skill is classified as suspicious due to the broad permissions granted in `SKILL.md`, specifically `Bash(python *)`, `Read`, `Grep`, and `Glob`. While these tools might be plausibly needed for a complex SDK integration, `Bash(python *)` allows for arbitrary Python code execution, which presents a significant vulnerability for potential Remote Code Execution (RCE) if the AI agent were to be compromised via prompt injection. However, the skill's instructions and examples do not demonstrate or encourage malicious behavior; instead, they promote secure practices like obtaining API keys from the environment and confirming destructive operations with the user. There is no evidence of intentional data exfiltration to unauthorized endpoints, persistence mechanisms, or obfuscation within the provided files. The external endpoint `https://api.foxreach.io/api/v1` is consistent with the skill's stated purpose.
能力评估
Purpose & Capability
The skill claims to operate via a local Python SDK and CLI located at integrations/sdk-python/ and integrations/cli/, but the skill bundle contains only SKILL.md, api-reference.md, and examples.md — no SDK or CLI code is included. That is inconsistent: either the SDK is expected to already exist on the host (not documented) or the skill omitted required code.
Instruction Scope
The SKILL.md stays focused on FoxReach API actions (leads, campaigns, inbox, analytics) and instructs the agent to run python one-liners and short scripts. However it also permits shell operations (cd, pip install -e ., and Bash with environment injection) and lists tools that can read files (Read, Grep, Glob). The instructions themselves do not explicitly ask for arbitrary system data, but the allowed operations give the agent broad ability to inspect local files if it chooses.
Install Mechanism
There is no install spec (instruction-only), which is lower-risk. But the doc tells the agent to run 'cd integrations/sdk-python && pip install -e .' and similar commands referencing local directories that are not present in the package. Running pip install -e . in an arbitrary directory or on an attacker-controlled path can be risky — the instructions should point to a verified upstream package or include the SDK.
Credentials
The skill expects an API key (FOXREACH_API_KEY starting with 'otr_') and shows examples of running Python with FOXREACH_API_KEY=... but the skill metadata declares no required environment variables or primary credential. This mismatch (using sensitive env vars but not declaring them) is an incoherence and reduces transparency about what secrets the skill needs.
Persistence & Privilege
The skill is not always-enabled and does not request persistent privileges. It does not declare any system config paths or attempt to modify other skills. No elevated persistence flags are present.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install foxreach
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /foxreach 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.1
foxreach 0.1.1 - No file changes detected in this release. - No new features, bug fixes, or documentation updates included.
v0.1.0
Initial release of the FoxReach skill for cold email outreach management. - Manage leads, campaigns, sequences, templates, email accounts, inbox, and analytics via the FoxReach API. - Provides CLI and Python SDK usage with secure API key handling. - Includes reference patterns for authentication, error handling, and pagination. - Supports key workflows: campaign setup, analytics review, inbox management, and bulk lead importing. - Features detailed operation reference and personalization options with template variables and spintax.
元数据
Slug foxreach
版本 0.1.1
许可证
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Foxreach 是什么?

Manage FoxReach cold email outreach — leads, campaigns, sequences, templates, email accounts, inbox, and analytics. Use when the user asks to create leads, m... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 779 次。

如何安装 Foxreach?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install foxreach」即可一键安装,无需额外配置。

Foxreach 是免费的吗?

是的,Foxreach 完全免费(开源免费),可自由下载、安装和使用。

Foxreach 支持哪些平台?

Foxreach 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Foxreach?

由 Usama Navid(@concaption)开发并维护,当前版本 v0.1.1。

💬 留言讨论