← 返回 Skills 市场
Hunter
作者
aiwithabidi
· GitHub ↗
· v1.0.0
435
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install hunter
功能描述
Hunter.io — email finder, email verifier, domain search, author finder, and lead management.
使用说明 (SKILL.md)
🔍 Hunter.io
Hunter.io — email finder, email verifier, domain search, author finder, and lead management.
Requirements
| Variable | Required | Description |
|---|---|---|
HUNTER_API_KEY |
✅ | Hunter.io API key |
Quick Start
# Find emails for a domain
python3 {{baseDir}}/scripts/hunter.py domain-search --domain \x3Cvalue> --limit "10" --type \x3Cvalue>
# Find specific person's email
python3 {{baseDir}}/scripts/hunter.py email-finder --domain \x3Cvalue> --first-name \x3Cvalue> --last-name \x3Cvalue>
# Verify an email address
python3 {{baseDir}}/scripts/hunter.py email-verifier --email \x3Cvalue>
# Count emails for domain
python3 {{baseDir}}/scripts/hunter.py email-count --domain \x3Cvalue>
# List saved leads
python3 {{baseDir}}/scripts/hunter.py list-leads --limit "20" --offset "0"
# Create a lead
python3 {{baseDir}}/scripts/hunter.py create-lead --email \x3Cvalue> --first-name \x3Cvalue> --last-name \x3Cvalue> --company \x3Cvalue>
# Update a lead
python3 {{baseDir}}/scripts/hunter.py update-lead \x3Cid> --email \x3Cvalue> --first-name \x3Cvalue> --last-name \x3Cvalue>
# Delete a lead
python3 {{baseDir}}/scripts/hunter.py delete-lead \x3Cid>
# List lead lists
python3 {{baseDir}}/scripts/hunter.py list-leads-lists
# Get account info & usage
python3 {{baseDir}}/scripts/hunter.py get-account
# Find author of article
python3 {{baseDir}}/scripts/hunter.py author-finder --url \x3Cvalue>
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/hunter.py |
Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
安全使用建议
This skill appears to implement Hunter.io API calls and only needs your HUNTER_API_KEY. Before installing: (1) confirm you trust the publisher (agxntsix.ai / M. Abidi); (2) be aware the script will try to read a workspace .env file (~/.openclaw/workspace/.env or $WORKSPACE/.env) if HUNTER_API_KEY is not set — review that file for other secrets or remove unrelated secrets from it; (3) consider creating a scoped/limited Hunter API key for this use and monitor its usage; (4) note the script has some minor bugs in how it builds query parameters (these are functional issues, not obviously malicious). If you need guaranteed minimal surface, run the script manually from a controlled environment or set HUNTER_API_KEY explicitly in the environment rather than relying on the .env fallback.
功能分析
Type: OpenClaw Skill
Name: hunter
Version: 1.0.0
The skill is classified as suspicious due to a URL parameter injection vulnerability found in `scripts/hunter.py`. User-controlled inputs (such as `domain`, `email`, `url`, and `id`) are directly inserted into the API path using string replacement (e.g., `path.replace('{domain}', str(args.domain or ''))`) before the full URL is properly encoded. This allows an attacker to inject additional query parameters, potentially altering the intended API request to `https://api.hunter.io/v2` in unintended ways. While the skill's overall purpose aligns with its description and it correctly retrieves the `HUNTER_API_KEY` from expected locations, this input sanitization flaw represents a significant vulnerability rather than clear malicious intent.
能力评估
Purpose & Capability
Name/description, declared HUNTER_API_KEY, and the included Python CLI all align with Hunter.io functionality. The script targets the official Hunter API (https://api.hunter.io) and the requested credential (HUNTER_API_KEY) is appropriate.
Instruction Scope
SKILL.md instructs running the provided script only, but the script's get_env() falls back to reading a workspace .env file (~/.openclaw/workspace/.env or WORKSPACE/.env) to locate HUNTER_API_KEY. That file read is not documented in SKILL.md and is scope creep — the skill will access a local file the user may not expect.
Install Mechanism
No install spec (instruction-only plus an included stdlib Python script). Nothing is downloaded or written to disk by an install step.
Credentials
Only HUNTER_API_KEY is declared (and is the primary credential), which is appropriate. However the code also reads WORKSPACE and a local .env file as a fallback. That implicit access to a local .env could expose other secrets if users keep multiple credentials there; WORKSPACE is not declared as required.
Persistence & Privilege
The skill is not always:true, does not request persistent system-wide changes, and does not modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install hunter - 安装完成后，直接呼叫该 Skill 的名称或使用
/hunter触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of the Hunter skill.
- Supports Hunter.io's email finder, email verifier, domain search, author finder, and lead management via CLI.
- Uses a single Python 3.10+ script with no external dependencies required.
- All outputs are in JSON format.
- Requires a HUNTER_API_KEY environment variable for authentication.
- Includes commands for account info, adding/updating/deleting leads, and other Hunter.io features.
元数据
常见问题
Hunter 是什么？
Hunter.io — email finder, email verifier, domain search, author finder, and lead management. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 435 次。
如何安装 Hunter？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install hunter」即可一键安装，无需额外配置。
Hunter 是免费的吗？
是的，Hunter 完全免费（开源免费），可自由下载、安装和使用。
Hunter 支持哪些平台？
Hunter 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Hunter？
由 aiwithabidi（@aiwithabidi）开发并维护，当前版本 v1.0.0。
推荐 Skills