Comprehensive client onboarding workflow management system for web agencies, design studios, and service providers. Manage complete client setup processes fr...
Security Analysis
high confidenceThe skill's code, instructions, and installation behavior are consistent with a local CLI onboarding checklist tool; it stores data in your home directory and does not contact external services or request unrelated credentials.
Name/description (client onboarding for agencies) match the included code and CLI: the package provides a local Python CLI, templates, SQLite DB, and commands for starting/tracking onboardings. Required binary (python3) is appropriate.
SKILL.md instructs running setup.sh and using the CLI commands only. The runtime instructions and code operate on local files (~/.nex-onboarding) and the included database; they do not attempt to read unrelated system files or environment variables, nor do they send data to external endpoints.
There is no remote install spec; instead a bundled setup.sh initializes a local data directory, runs the included Python code to initialize SQLite, and creates a wrapper in ~/.local/bin. This is expected for a local CLI skill, but note that setup.sh will write files into your home directory and create an executable wrapper that invokes the bundled code.
The skill requests no environment variables or external credentials. The default checklist mentions Cloudflare, GoHighLevel, Google Analytics etc., but the code does not perform network operations or require associated API keys; any credentials would need to be supplied manually by the user and would be stored locally if added to notes or similar fields.
The skill persists data locally (creates ~/.nex-onboarding and an executable in ~/.local/bin). always:false and normal autonomous invocation settings. Creating local data and a wrapper is appropriate for a CLI tool, but be aware it adds persistent files/executables to your user account.
Guidance
This package appears to be a normal, local CLI onboarding tool. Before installing: 1) Review the bundled files (you already have them) and confirm you trust the author, since setup.sh will write to ~/.nex-onboarding and create an executable in ~/.local/bin that runs the included Python code. 2) The tool stores client data (emails, phone numbers, notes) in a local SQLite DB unencrypted — avoid entering sensitive secrets or service credentials into notes or fields unless you accept local storage. 3) If you prefer isolation, run setup.sh and the CLI inside a controlled environment (dedicated user account, container, or virtualenv). 4) If you expect the tool to perform Cloudflare/GHL/Google operations, note that it does not automatically contact those services or require API keys; any such integrations would need to be implemented separately. Overall the package is internally consistent with its stated purpose.
Latest Release
v1.0.0
Initial release
More by @nexaiguy
Published by @nexaiguy on ClawHub
