← 返回 Skills 市场
mrnsmh

Contact Finder

作者 Marouane · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
372
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-skill-contact-finder
功能描述
Find professional emails and contacts from a name + company/domain using SerpAPI + OpenAI GPT-4o-mini.
安全使用建议
This skill appears to do what it says (search public sources and use GPT to extract/validate contact info), but the registry omitted the required API keys — you must supply SERPAPI_KEY and OPENAI_API_KEY (and optionally BRAVE_API_KEYS) in your environment for it to work. Before installing or running: (1) review the included Python script yourself (it is present and readable) and confirm you're comfortable sending search snippets to OpenAI/SerpAPI/Brave; these snippets may contain personal data. (2) Use least-privilege API keys or billing/usage limits for OpenAI and SerpAPI to limit exposure and cost. (3) Consider running the script in an isolated environment (container) if you want to limit log exposure; note the script can print partial Brave keys in warnings. (4) Verify legal/compliance constraints (GDPR/consent) before mass-collecting or storing contact data. If you want to proceed, add the required env vars to the skill's configuration or shell only after understanding the privacy and billing implications.
功能分析
Type: OpenClaw Skill Name: openclaw-skill-contact-finder Version: 0.1.0 The skill bundle is designed to find professional contacts using SerpAPI/Brave Search and OpenAI. It correctly retrieves API keys from environment variables and makes legitimate network calls to these services, which is aligned with its stated purpose. There is no evidence of data exfiltration beyond what is necessary for its function, no malicious execution, persistence mechanisms, or prompt injection against the OpenClaw agent. The use of user input in LLM prompts is inherent to its operation and does not indicate malicious intent or local system compromise.
能力评估
Purpose & Capability
The skill's stated purpose (find professional emails via SerpAPI + OpenAI) matches the code and instructions. However the registry metadata declares no required environment variables or primary credential while BOTH the SKILL.md and the script require SERPAPI_KEY and OPENAI_API_KEY (and optionally BRAVE_API_KEYS). The missing declaration in registry metadata is an incoherence that users should notice before installing/using the skill.
Instruction Scope
The SKILL.md and the script instruct the agent to run searches (SerpAPI or Brave), collect snippets, and send those snippets to OpenAI to extract/validate contacts; they also generate pattern-based guesses. The instructions do not attempt to read unrelated local files or other secrets. The agent will transmit collected search snippets (which can contain PII) to external APIs as part of normal operation — this is expected for the stated purpose but is a privacy consideration.
Install Mechanism
There is no install spec (instruction-only skill) and the SKILL.md suggests pip3 install openai requests. No archive downloads or obscure install URLs are used. Risk from the install mechanism is low.
Credentials
The skill legitimately requires SERPAPI_KEY and OPENAI_API_KEY (and optionally BRAVE_API_KEYS) to function — those are proportionate to the task. However, the registry metadata did not list these required env vars or a primary credential, which is inconsistent and makes it easy to overlook that sensitive keys are needed. Additionally, the script logs a Brave key snippet in warnings (it prints key[:10]...), which could reveal partial key material to logs/monitors.
Persistence & Privilege
The skill does not request always:true, does not modify system/other-skill configs, and has no install step that writes persistent binaries. It runs on demand and does not request elevated platform privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install openclaw-skill-contact-finder
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /openclaw-skill-contact-finder 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
- Initial release of contact-finder skill. - Find professional emails and contacts from a name and company/domain using SerpAPI and OpenAI GPT-4o-mini. - Supports company, domain, name (optional), and output format options. - Returns contacts with email, LinkedIn, job title, and confidence level. - Includes setup instructions and environment variable configuration.
元数据
Slug openclaw-skill-contact-finder
版本 0.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Contact Finder 是什么?

Find professional emails and contacts from a name + company/domain using SerpAPI + OpenAI GPT-4o-mini. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 372 次。

如何安装 Contact Finder?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-skill-contact-finder」即可一键安装,无需额外配置。

Contact Finder 是免费的吗?

是的,Contact Finder 完全免费(开源免费),可自由下载、安装和使用。

Contact Finder 支持哪些平台?

Contact Finder 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Contact Finder?

由 Marouane(@mrnsmh)开发并维护,当前版本 v0.1.0。

💬 留言讨论