← 返回 Skills 市场
mbright4497

Hlp Ghl Api

作者 mbright4497 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
129
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install hlp-ghl-api
功能描述
HubLinkPro GoHighLevel API — manage contacts, pipelines, workflows, and messaging for Tri-Cities real estate lead gen
使用说明 (SKILL.md)

HubLinkPro GHL API Skill

Base URL: https://services.leadconnectorhq.com Auth header: Authorization: Bearer $GHL_API_KEY All requests include: Version: 2021-07-28

Get Contact by Phone or Email

curl -s -H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28"
"https://services.leadconnectorhq.com/contacts/search/duplicate?locationId=$GHL_LOCATION_ID&email=$EMAIL" | jq .

Create or Update Contact

curl -s -X POST "https://services.leadconnectorhq.com/contacts/"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json"
-d '{"firstName":"$FIRST","lastName":"$LAST","email":"$EMAIL","phone":"$PHONE","locationId":"'$GHL_LOCATION_ID'","tags":["$TAGS"],"source":"$SOURCE"}' | jq .

Add Tags to Contact

curl -s -X POST "https://services.leadconnectorhq.com/contacts/$CONTACT_ID/tags"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json"
-d '{"tags":["$TAG1","$TAG2"]}' | jq .

Create Opportunity (Pipeline Deal)

curl -s -X POST "https://services.leadconnectorhq.com/opportunities/"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json"
-d '{"pipelineId":"$PIPELINE_ID","locationId":"'$GHL_LOCATION_ID'","name":"$DEAL_NAME","stageId":"$STAGE_ID","contactId":"$CONTACT_ID","status":"open"}' | jq .

Move Opportunity Stage

curl -s -X PUT "https://services.leadconnectorhq.com/opportunities/$OPP_ID/status"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json"
-d '{"stageId":"$NEW_STAGE_ID"}' | jq .

List Pipelines

curl -s -H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28"
"https://services.leadconnectorhq.com/opportunities/pipelines?locationId=$GHL_LOCATION_ID" | jq .

Send SMS via Conversations API

curl -s -X POST "https://services.leadconnectorhq.com/conversations/messages"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json"
-d '{"type":"SMS","contactId":"$CONTACT_ID","message":"$MESSAGE"}' | jq .

Search Contacts by Tag

curl -s -H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28"
"https://services.leadconnectorhq.com/contacts/?locationId=$GHL_LOCATION_ID&query=$SEARCH_TERM&limit=20" | jq .

Get Contact Activity / Notes

curl -s -H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28"
"https://services.leadconnectorhq.com/contacts/$CONTACT_ID/notes" | jq .

Add Note to Contact

curl -s -X POST "https://services.leadconnectorhq.com/contacts/$CONTACT_ID/notes"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json"
-d '{"body":"$NOTE_TEXT"}' | jq .

Trigger Workflow for Contact

curl -s -X POST "https://services.leadconnectorhq.com/contacts/$CONTACT_ID/workflow/$WORKFLOW_ID"
-H "Authorization: Bearer $GHL_API_KEY" -H "Version: 2021-07-28" -H "Content-Type: application/json" | jq .

Key HubLinkPro Context

  • Location: Tri-Cities TN (Johnson City, Kingsport, Bristol)
  • Pipelines: HLP – Sellers, New Construction, Pre-Foreclosure
  • Tags: new-lead, fb-seller, new-construction, pre-foreclosure, contacted, qualified, nurture
  • Agents: Tasha, Nate, Cory, Laura, Mary Ellen, Josh
  • When assigning leads, use tag format: agent-{firstname}
安全使用建议
This skill appears to do what it says (calls the LeadConnector/GoHighLevel API using curl), but you should be cautious because the package has no homepage or visible source and the owner metadata is opaque. Before installing: (1) Verify the provider (confirm 'HubLinkPro' and the owner are legitimate); (2) Only provide a GHL API key with the minimum permissions needed (avoid using an account-wide admin key); (3) Expect PII (contact names/emails/phones/notes) to be sent to https://services.leadconnectorhq.com—ensure that endpoint and your data-sharing policy are acceptable; (4) Be aware of SMS costs or outbound messaging side effects (sending SMS could incur charges); (5) If you need higher confidence, ask the publisher for a homepage or repo, or request the skill be republished with a primary credential set to GHL_API_KEY and clear provenance. If you cannot verify the author/source, treat the skill as untrusted and avoid providing production API keys or real contact data.
功能分析
Type: OpenClaw Skill Name: hlp-ghl-api Version: 1.0.0 The skill bundle contains multiple shell injection vulnerabilities in SKILL.md due to the insecure construction of curl commands. Specifically, variables like $GHL_LOCATION_ID, $FIRST, and $EMAIL are concatenated into shell strings in a way that allows for arbitrary command execution if the inputs are not strictly sanitized (e.g., the use of "'$GHL_LOCATION_ID'" breaks out of single quotes). While the skill's logic is clearly aligned with its stated purpose of managing GoHighLevel CRM data via legitimate endpoints (services.leadconnectorhq.com), these vulnerabilities represent a significant security risk.
能力评估
Purpose & Capability
The name/description (manage contacts, pipelines, workflows, messaging) match the actual instructions: all runtime commands are curl calls to services.leadconnectorhq.com and require an API key and location ID. Requested binaries (curl, jq) are appropriate. No unrelated credentials or binaries are requested.
Instruction Scope
The SKILL.md contains explicit curl examples for searching/creating contacts, managing opportunities, sending SMS, triggering workflows, and adding notes—these are within the declared purpose. However, it will transmit contact data (names, emails, phone numbers, notes, messages) to an external service (LeadConnectorHQ) which may include PII. The instructions also reference many placeholder variables (e.g., $EMAIL, $FIRST, $CONTACT_ID, $MESSAGE, $WORKFLOW_ID) that are not listed in requires.env (these are runtime input placeholders rather than required env vars). The skill does not instruct reading local files or unrelated environment variables.
Install Mechanism
This is instruction-only with no install spec and no code files. That reduces surface risk because nothing is written to disk by an installer.
Credentials
Only GHL_API_KEY and GHL_LOCATION_ID are declared as required env vars, which is proportionate for an API integration. Minor inconsistency: registry metadata lists no primary credential even though GHL_API_KEY is clearly the key credential used. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false, no install, no config paths, and no requests to modify other skills or system settings. The skill can be invoked autonomously (platform default), which is normal, but that means it could send data to the external API without further prompts if the agent is permitted to use it.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install hlp-ghl-api
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /hlp-ghl-api 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of HubLinkPro GoHighLevel API Skill. - Provides shell commands for managing contacts, pipelines, workflows, and messaging via the GoHighLevel API. - Supports searching, creating, and updating contacts; adding tags and notes; and triggering workflows. - Includes pipeline opportunity management and SMS sending capability. - Designed for Tri-Cities real estate lead generation use cases. - Requires environment variables: GHL_API_KEY, GHL_LOCATION_ID.
元数据
Slug hlp-ghl-api
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Hlp Ghl Api 是什么?

HubLinkPro GoHighLevel API — manage contacts, pipelines, workflows, and messaging for Tri-Cities real estate lead gen. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 129 次。

如何安装 Hlp Ghl Api?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install hlp-ghl-api」即可一键安装,无需额外配置。

Hlp Ghl Api 是免费的吗?

是的,Hlp Ghl Api 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Hlp Ghl Api 支持哪些平台?

Hlp Ghl Api 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Hlp Ghl Api?

由 mbright4497(@mbright4497)开发并维护,当前版本 v1.0.0。

💬 留言讨论