PhantomBuster

Control PhantomBuster automation agents via API. List agents, launch automations, get output/results, check status, and abort running agents. Use when the user needs to run LinkedIn scraping, Twitter automation, lead generation phantoms, or any PhantomBuster workflow.

What to consider before installing: - This skill does what it says: it uses your PhantomBuster API key to list/launch/abort agents and download results. The pb.py code is short and readable and shows the environment variable PHANTOMBUSTER_API_KEY is required. - The registry metadata failing to declare the required API key and primary credential is a red flag — the metadata should advertise that it needs PHANTOMBUSTER_API_KEY. Ask the publisher to correct the metadata before trusting the skill. - There is no homepage or known source/maintainer; prefer skills with a verifiable source. If you proceed, only provide an API key with the minimum necessary privileges (if PhantomBuster supports scoped or limited keys), and consider using a throwaway or rate-limited account if possible. - The skill will download result.csv from phantombuster.s3.amazonaws.com using paths returned by the API — verify this behavior against your expectations and that result data may include scraped personal data (ensure legal/compliance considerations). - If you need higher assurance, run the included pb.py in a sandboxed environment or inspect/modify it yourself; request the maintainer to update registry metadata to explicitly list PHANTOMBUSTER_API_KEY as required and add a homepage/source link. - Confidence in this assessment is medium because the code is straightforward and coherent with the description, but provenance and metadata mismatches lower trust.

Type: OpenClaw Skill Name: phantombuster Version: 1.2.0 The skill is designed to interact with the legitimate PhantomBuster API and S3 storage to manage automation agents and retrieve their results. It correctly uses an environment variable for the API key and makes network requests only to `api.phantombuster.com` and `phantombuster.s3.amazonaws.com`. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts against the AI agent in `SKILL.md` or `pb.py`. All actions are aligned with the stated purpose.