← 返回 Skills 市场
big-roman123

leadklick

作者 big-roman123 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2152
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install leadklick
功能描述
Automate lead capture in Supabase with Make.com email workflows, manage lead status, conversations, and track auto-reply delivery.
使用说明 (SKILL.md)

Lead Inbox Automator

Capture leads into a centralized Supabase database with automatic Make.com email automation.

Description

This skill provides a complete lead management system for Clawd agents. It stores leads in Supabase, triggers Make.com webhooks for auto-reply emails, and tracks the full conversation lifecycle from "new" to "qualified".

Configuration

{
  "supabaseUrl": "https://your-project.supabase.co",
  "supabaseKey": "eyJ...your-service-role-key",
  "orgId": "550e8400-e29b-41d4-a716-446655440000",
  "defaultPriority": "medium"
}

Important: Use the Service Role Key, not the Anon Key, for full database access.

Actions

createLead

Create a new lead and automatically trigger the automation workflow.

Parameters:

  • email (string, required): Contact email address
  • name (string, optional): Contact person name
  • phone (string, optional): Phone number
  • source (string, optional): Origin channel (default: "clawd_agent")
  • priority (string, optional): "low", "medium", "high", "urgent"
  • custom_fields (object, optional): Any additional data

Returns:

{
  "success": true,
  "lead_id": "uuid",
  "status": "new",
  "automation_triggered": true,
  "message": "Lead captured. Auto-reply will be sent within 60 seconds."
}

Example:

const result = await skill.createLead({
  email: "[email protected]",
  name: "Max Mustermann",
  source: "chat_bot",
  custom_fields: { product: "saas_basic" }
});

getLead

Retrieve lead details including full conversation history.

Parameters:

  • id (string, required): Lead UUID

Returns: Lead object with conversations array and reply_pending boolean.

listLeads

List leads with filtering options.

Parameters:

  • status (string, optional): Filter by status
  • priority (string, optional): Filter by priority
  • limit (number, optional): Max results (default: 50)
  • dateFrom (string, optional): ISO date filter

Returns: Array of leads and total count.

updateStatus

Update lead lifecycle status.

Parameters:

  • id (string, required): Lead UUID
  • status (string, required): "qualified", "won", "lost", etc.
  • notes (string, optional): Qualification notes

addConversation

Add a manual reply or note to the lead thread.

Parameters:

  • leadId (string, required): Lead UUID
  • content (string, required): Message text
  • subject (string, optional): Subject line

getAutomationStatus

Check if the auto-reply email was successfully sent.

Parameters:

  • leadId (string, required): Lead UUID

Returns:

{
  "auto_reply_sent": true,
  "minutes_since_creation": 2,
  "automation_ok": true
}

Usage Flow

  1. Capture: When a user expresses interest, call createLead()
  2. Verify: After 60-120 seconds, call getAutomationStatus() to confirm auto-reply
  3. Qualify: During conversation, update status to "qualified" if interested
  4. Log: Use addConversation() to store your agent responses

Error Handling

Common errors:

  • Invalid email format
  • Duplicate lead (within 24h)
  • Missing Supabase credentials
  • Automation timeout (>5min without reply)

Schema

Leads table:

  • id, email, name, phone, source, status, priority
  • custom_fields (JSON), metadata (JSON)
  • first_reply_sent_at, created_at

Conversations table:

  • id, lead_id, direction (inbound/outbound/automated)
  • content, subject, channel, sent_at

Tags

lead, crm, sales, automation, email, supabase

Version

1.0.0

安全使用建议
This skill appears to implement the advertised lead-capture functionality, but it asks you to provide a Supabase Service Role Key — a powerful credential that bypasses row-level security. Before installing: 1) Confirm the registry listing (the skill.json/README require secrets even though the top-level metadata omitted them). 2) Prefer giving a least-privilege API key or a dedicated service account with only the required insert/update/select/delete permissions (or an HTTP proxy endpoint) rather than your full Service Role Key. 3) Review and enforce RLS policies on the Supabase project, and audit logs for actions taken by the skill. 4) Verify the external automation endpoints (Make.com / Resend) you'll wire into the workflow and ensure they are trustworthy. 5) If you cannot restrict the Supabase key, do not provide it to untrusted or third-party skills. If you want to be safer, request that the author support scoped keys or an intermediary service that limits operations to only the tables/actions the agent needs.
功能分析
Type: OpenClaw Skill Name: leadklick Version: 1.0.0 The skill requires a Supabase Service Role Key, which grants broad read/write permissions to the entire Supabase project, as explicitly stated in `SKILL.md` and `README.md`. While the skill's TypeScript code (`src/api.ts`) appears to use this key only for its stated purpose of managing leads within specific tables, the underlying credential itself represents a high-risk, broad permission. This aligns with the 'suspicious' classification threshold for risky capabilities without clear malicious intent, specifically 'broad permissions'.
能力评估
Purpose & Capability
The package, SKILL.md, README, and src/api.ts consistently implement a lead-capture/automation integration (Supabase + Make.com). That purpose aligns with the code and declared capabilities. However, the top-level registry metadata showed no required env vars or primary credential while skill.json and README explicitly require a Supabase service-role key and orgId — an inconsistency between the registry listing and the skill's own manifest/docs.
Instruction Scope
Runtime instructions (SKILL.md) and the code stay within the described lead-management scope: create/list/get leads, add conversations, update status, and check automation status. The skill triggers external automation (Make.com / Resend) as part of its flow, which is expected given the stated purpose. The SKILL.md does instruct use of the Supabase Service Role Key for full DB access; it does not instruct reading unrelated files or exfiltrating unrelated data.
Install Mechanism
There is no install script in the registry (instruction-only install), and no arbitrary download URLs. The package.json lists a dependency on @supabase/supabase-js which is expected. Overall install risk is low to moderate (normal npm dependency fetch) — nothing like a remote extract from an untrusted URL.
Credentials
The skill requires a Supabase Service Role Key (skill.json and README) which grants broad admin-level access to the database (bypasses RLS). For an agent-run skill, that is a high-privilege secret. While the skill's operations (insert/delete/update leads) technically need DB write permissions, best practice is least-privilege keys or function-based endpoints. Additionally, the registry-level metadata omitted these required credentials, which is an important mismatch and a red flag for accidental mis-declaration or deliberate omission.
Persistence & Privilege
The skill does not request always:true and does not modify other skills; autonomous invocation is allowed (platform default). Autonomous invocation combined with possession of a Supabase service role key increases potential blast radius — the skill could perform wide-ranging DB changes when invoked by the agent. This is not inherently malicious but is an important operational risk to consider.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install leadklick
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /leadklick 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Leadklick 1.0.0 – Initial Release - Centralized lead management system using Supabase as the backend. - Automatically triggers Make.com webhooks for auto-reply email automation. - Provides actions to create, retrieve, list, and update leads, plus add conversations and check automation status. - Tracks lead lifecycle from "new" to "qualified" with customizable status and priority. - Includes robust error handling and a detailed schema for leads and conversations.
元数据
Slug leadklick
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

leadklick 是什么?

Automate lead capture in Supabase with Make.com email workflows, manage lead status, conversations, and track auto-reply delivery. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2152 次。

如何安装 leadklick?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install leadklick」即可一键安装,无需额外配置。

leadklick 是免费的吗?

是的,leadklick 完全免费(开源免费),可自由下载、安装和使用。

leadklick 支持哪些平台?

leadklick 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 leadklick?

由 big-roman123(@big-roman123)开发并维护,当前版本 v1.0.0。

💬 留言讨论