📦 AgenticCreed Signup — AgenticCreed 注册
v1.0.1AgenticCreed 注册获客工具。
0· 1.0k·1 当前·1 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's runtime instructions match a simple lead-creation purpose (POSTing PII to an external API using AGENTICCREED_API_KEY), but the registry metadata omits the required environment variable and the package lacks a source/homepage — verify the endpoint and key usage before installing.
评估建议
Before installing or using this skill: 1) Verify the endpoint and owner — ask for a homepage, documentation, or company identity for gateway.agenticcreed.ai. 2) Only provide an API key that is scoped/minimal (restrict permissions, set expiry) and avoid using high-privilege keys. 3) Be aware the skill will send personal data (email, address, date of birth, phone) to an external service — confirm its privacy and retention policies. 4) Fix the metadata discrepancy: ensure the registry entry declare...详细分析 ▾
⚠ 用途与能力
SKILL.md and SKILL.yaml clearly describe a lead-creation HTTP POST to https://gateway.agenticcreed.ai/signup-leads and expect an AGENTICCREED_API_KEY. However the registry metadata at the top lists no required env vars or primary credential. The runtime behavior (sending leads to that endpoint) is coherent with the skill name, but the metadata omission is an inconsistency that could mislead automated permission checks.
ℹ 指令范围
Instructions are narrowly scoped to sending lead fields (email, name, address, DOB, phone, etc.) to the stated endpoint and mapping the JSON response. This is consistent with the stated function, but it will transmit personal data (PII) to an external endpoint; the skill provides no homepage, owner info beyond an opaque owner ID, or privacy/policy details to evaluate whether that data handling is acceptable.
✓ 安装机制
Instruction-only skill with no install spec and no code files — minimal on-disk risk. No downloads or build steps are present.
⚠ 凭证需求
The SKILL.md and SKILL.yaml require AGENTICCREED_API_KEY (x-api-key header), which is a single API credential appropriate for the integration. However the registry metadata incorrectly lists 'Required env vars: none' and 'Primary credential: none', creating a mismatch between declared requirements and actual runtime needs. That mismatch is a governance/privacy concern and could cause secrets to be omitted or mismanaged.
✓ 持久化与权限
The skill does not request always:true or any elevated persistence. It is user-invocable and allows autonomous invocation (platform default), which is expected for skills of this type.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/11
- No changes detected in this version. - Functionality, configuration, and usage remain the same.
● 无害
安装命令
点击复制官方npx clawhub@latest install agenticcreed-signup-lead
镜像加速npx clawhub@latest install agenticcreed-signup-lead --registry https://cn.longxiaskill.com
技能文档
Create a signup lead in the AgenticCreed system using the public HTTP endpoint.
This skill sends lead details (email, name, contact info, etc.) to https://gateway.agenticcreed.ai/signup-leads.
Usage
Use this skill when you need to create a new signup lead with contact information.
Parameters
email: Email address (必填)firstName: 第一个 name (必填)lastName: 最后的 name (必填)address: Physical addressdateOfBirth: 日期 的 birth (ISO 格式)phoneNumber: Phone 数字whatsAppNumber: WhatsApp 数字jobTitle: 任务 titledateOfJoining: 日期 的 joining (ISO 格式)
Configuration
Set the AGENTICCREED_API_KEY environment variable before using this skill.