Make your agent sell websites to local businesses on autopilot. Finds leads from Google Maps, builds a custom AI website for each one, sends outreach emails, and can even call them. Use when the user wants to find leads, generate websites, send emails, or make voice calls.
Security Analysis
medium confidenceThe skill is internally consistent with its stated purpose (it only needs an Unloopa API key and its instructions call Unloopa's REST API), but the skill can autonomously trigger outbound emails and voice calls so you should be cautious about handing it a live API key and about allowing autonomous runs.
Name/description (auto lead scraping, website generation, outreach and calling) match the required artifact: a single UNLOOPA_API_KEY for the Unloopa REST API. There are no unrelated credentials, binaries, or installs requested that would be inconsistent with the described service.
SKILL.md instructs the agent to call Unloopa endpoints (quota, /command, /leads, outreach, voice endpoints). It explicitly runs a full pipeline that can scrape leads, generate websites, enrich contacts, queue/send outreach emails, and trigger voice calls. This behavior is consistent with the skill purpose but implies potentially impactful outbound activity (emails/calls) and billing/credit use; the agent should confirm with the user before sending or activating campaigns.
No install spec and no code files (instruction-only). This is low risk from an installation perspective because nothing is written to disk or downloaded by the skill itself.
Only a single environment variable (UNLOOPA_API_KEY) is required and that aligns with the declared primary credential and the documented API usage. There are no extra or unexplained secret requests.
always:false (normal). The skill can be invoked autonomously (platform default). Because the skill's API calls can send emails and place voice calls and consume paid credits, autonomous invocation increases blast radius — recommend requiring explicit user confirmation before performing outreach or purchases.
Guidance
This skill appears to do what it claims: it uses your Unloopa API key to run lead scraping, website generation, outreach emails, and voice calls via the Unloopa REST API. Before installing or enabling it: (1) Only provide a key you trust — consider using a sandbox/test key if available; (2) Review Unloopa's dashboard/settings so you understand billing, quotas, and what upgrades/purchases might be triggered; (3) Require explicit confirmation for any outbound actions (sending email campaigns, activating voice campaigns, or buying voice credits/phone numbers); (4) Test on a small, safe dataset first; (5) If you don't recognize dashboard.unloopa.com or the publisher, verify the vendor and privacy terms before providing a live key. If you want higher assurance, ask the skill author for a homepage, privacy/billing docs, and a way to run the flows in read-only or dry-run mode.
Latest Release
v1.3.0
- Updated description to emphasize automated selling of websites to local businesses via Google Maps lead scraping and voice/email outreach. - Bumped skill version from 1.2 to 1.3. - No functional or API changes; documentation and positioning improved for clarity.
Popular Skills
Published by @echris6 on ClawHub
