Bundle Pluginsource linked

Aigroup Lead Discovery Openclaw Releasev0.7.1

aigroup-lead-discovery-openclaw

aigroup-lead-discovery-openclaw·runtime aigroup-lead-discovery-openclaw·by @jackdark425
openclaw bundles install clawhub:aigroup-lead-discovery-openclaw
Latest release: v0.7.1Download zip

Capabilities

Bundle format
generic
Host targets
claude
Runtime ID
aigroup-lead-discovery-openclaw
Security Scan
VirusTotalVirusTotal
stale
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The banker lead-discovery and company-intelligence purpose is coherent, but the package also ships Tianyancha and PrimeMatrix MCP bridge helpers even though the README describes the Hub release as skill-only and excluding optional bridge helpers.
Instruction Scope
The visible install and preflight commands are user-directed, and the shown preflight script only checks for python3 and node. The concern is not automatic execution, but the broader helper capabilities present in the bundle.
Install Mechanism
There is no install spec and no declared required binaries or environment variables, while documentation asks users to install the plugin, restart the OpenClaw gateway, and run a local preflight shell script.
!
Credentials
Registry metadata declares no credentials or config paths, but bridge code reads OpenClaw configuration and provider API keys/authorization values for Tianyancha and PrimeMatrix.
!
Persistence & Privilege
The Python bridge helpers default to persistent /tmp debug logs of MCP input/output messages, which can include company names and intelligence results, without a clear disclosure in the user-facing metadata.
Scan Findings in Context
[suspicious.exposed_secret_literal] expected: The supplied source for the flagged Tianyancha JavaScript bridge shows AUTHORIZATION being loaded from OpenClaw environment/config values, not a visible hardcoded secret. Authorization handling is expected for this provider bridge, but the credential use is under-declared in metadata.
What to consider before installing
Install only if you are comfortable with optional Tianyancha/PrimeMatrix bridge code being present. Before using any bridge helper, review which OpenClaw credentials it reads, use scoped provider keys, confirm the remote URL, and disable or secure debug logs.
scripts/mcp_compat/tianyancha_stdio_bridge.mjs:20
File appears to expose a hardcoded API secret or token.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
c033ccf95038
Tag
main
Provenance
No
Scan status
suspicious

Tags

latest
0.7.1

aigroup-lead-discovery-openclaw

Lead-discovery and company-intelligence suite for banker workflows on OpenClaw.

Quick Install (macmini)

Just want it running? See QUICKSTART.md.

openclaw plugins install clawhub:aigroup-lead-discovery-openclaw
launchctl kickstart -k gui/$(id -u)/ai.openclaw.gateway
bash ~/.openclaw/extensions/aigroup-lead-discovery-openclaw/scripts/preflight.sh

This is the upstream half — install this first, then add aigroup-financial-services-openclaw second.

This plugin is the recommended first install in the AIGroup banker stack. Install it first as the intelligence and data-entry suite, then add aigroup-financial-services-openclaw as the downstream modeling and deliverables suite.

This repository is a standalone OpenClaw-compatible Claude bundle. The Hub release packages:

  • five banker SOP skills for lead discovery and customer investigation
  • no bundled MCP bridge runtime by default
  • a clean skill-only install surface for OpenClaw Hub

It is also designed to be used alongside the AIGroup data-service MCP stack:

  • aigroup-fmp-mcp
  • aigroup-market-mcp
  • aigroup-finnhub-mcp
  • Tianyancha
  • PrimeMatrixData

Included

Skills

  • client-initial-screening
  • company-event-scan
  • customer-investigation
  • key-account-briefing
  • weekly-lead-watchlist

Recommended companion AIGroup data services

  • aigroup-fmp-mcp
  • aigroup-market-mcp
  • aigroup-finnhub-mcp

Plugin Layout

.claude-plugin/plugin.json
skills/

OpenClaw detects this repository as a Claude bundle and maps:

  • skills/ into normal OpenClaw skills

Install

Recommended suite-first install flow:

openclaw plugins install aigroup-lead-discovery-openclaw
openclaw plugins install aigroup-financial-services-openclaw

OpenClaw Hub

openclaw plugins install aigroup-lead-discovery-openclaw

Local path

openclaw plugins install ./aigroup-lead-discovery-openclaw

GitHub shorthand

openclaw plugins install jackdark425/aigroup-lead-discovery-openclaw

Claude Code

This repository is a single self-contained Claude plugin, but Claude Code installs plugins through marketplaces, not raw clones. Register it as a one-plugin marketplace in .claude/settings.json (project or user scope):

{
  "extraKnownMarketplaces": {
    "aigroup-lead-discovery": {
      "source": {
        "source": "settings",
        "plugins": [
          {
            "name": "aigroup-lead-discovery-openclaw",
            "source": {
              "source": "github",
              "repo": "jackdark425/aigroup-lead-discovery-openclaw"
            }
          }
        ]
      }
    }
  },
  "enabledPlugins": {
    "aigroup-lead-discovery-openclaw@aigroup-lead-discovery": true
  }
}

For an opinionated banker stack that wires this plugin alongside the financial-services bundles, see the companion banker/ workspace — it ships a ready-made .claude/settings.json.

Published package (ClawHub Latest):

  • aigroup-lead-discovery-openclaw@0.3.1 (see QUICKSTART.md for install; tag here is informational only — ClawHub install resolves latest automatically)

Recommended companion package:

  • aigroup-financial-services-openclaw

Quick install guide:

Verify After Install

openclaw plugins inspect aigroup-lead-discovery-openclaw
openclaw plugins inspect aigroup-financial-services-openclaw
openclaw skills list

Recommended Trust Pinning

If you want to silence the plugins.allow is empty warning and pin trust explicitly, add the two AIGroup suite ids to your OpenClaw config:

{
  "plugins": {
    "allow": [
      "aigroup-lead-discovery-openclaw",
      "aigroup-financial-services-openclaw"
    ]
  }
}

Then restart the gateway.

Release Prep

Validate the repository bundle shape directly:

python3 scripts/validate_bundle.py .

ClawHub releases should be published from the repository root. The Hub release is intentionally skill-only so it avoids shipping optional bridge helpers that can trigger conservative static security scans.

Environment

Recommended data sources for best results:

  • PrimeMatrixData
  • Tianyancha
  • aigroup-market-mcp
  • aigroup-fmp-mcp
  • aigroup-finnhub-mcp

What Each Skill Does

client-initial-screening

Quickly decide whether a company is worth contacting at all. Focuses on entity confirmation, operating status, growth clues, risk flags, and a recommended next action.

company-event-scan

Turns web and enterprise-data signals into outreach triggers such as hiring, expansion, partnerships, honors, financing clues, and likely banking entry points.

customer-investigation

Default banker workflow for turning company intelligence into a structured Chinese customer investigation report. Use it when a client manager needs entity confirmation, business summary, risk review, and banking entry points in one internal memo.

key-account-briefing

Produces a concise pre-meeting briefing for a banker before first contact or an on-site visit.

weekly-lead-watchlist

Scans a batch list and ranks accounts into follow now, observe, or pause groups.

Validation

This plugin has been validated on OpenClaw 2026.4.2 for:

  • bundle loading
  • MCP recognition
  • skill discovery
  • skill readiness

See docs/validation.md.

Notes

  • The plugin is distributed as a compatible bundle, not a native in-process OpenClaw plugin.
  • The Hub release intentionally excludes optional local bridge helpers and focuses on portable skills.
  • The recommended deployment model is suite-first: use this plugin for intelligence gathering and customer investigation, then use aigroup-financial-services-openclaw for customer analysis, modeling, and deliverable workflows.