ops-leadgen — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ops-leadgen (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Load ops-rules before acting. Public repo (no personal data). Outbound: one draft → one approval → one send. If AskUserQuestion / Workflow are missing, follow Rule 10 in ops-rules (Hermes: numbered options / two-turn Telegram card; delegate_task).
Wraps my-project-leadgen CLI for the daily leadgen review-and-send loop.
Repo: ~/Projects/my-project-b2b-leadgen DB: ~/Projects/my-project-b2b-leadgen/leads.db (gitignored) Run with Doppler: doppler run --project my-project-b2b-leadgen --config dev -- my-project-leadgen <cmd>
| Argument | Action |
|---|---|
review (default) | Show pending drafts one-by-one, approve or skip |
send --draft-id N | Hand one draft to the host's approved outbound gate (Rule 6) |
usage | Print today's Apollo reveals + Apify runs |
scrape [--limit N] | Discover new NL HR contacts via Apollo |
enrich | Run Apify enrichment on unenriched leads |
draft | Generate Claude NL/EN drafts for undrafted leads |
NEVER send multiple drafts in one turn. Each send is a separate staged-draft → approval → send cycle.
my-project-leadgen review (or fetch pending drafts from DB directly)[Send] / [Skip] / [Stop review][Send]: one draft, one approval, one send, only through the host'sapproved outbound gate. a. Pass the exact recipient, subject and full latest body to that gate; it shows the complete text and binds the owner's native yes to those bytes. b. Approval is that native yes on the shown draft only. A typed word, file, token or counter is never consent, and one approval never covers another draft. c. After the gate reports delivery, confirm it on a fresh read of the sent mail, then record the send in the leadgen database. d. If the gate refuses or cannot send this channel, keep the draft pending with the exact diagnostic. Never run a direct sender as a substitute for the gate.
# Step 1: discover contacts (costs Apollo reveals — check usage first)
doppler run --project my-project-b2b-leadgen --config dev -- \
my-project-leadgen usage
doppler run --project my-project-b2b-leadgen --config dev -- \
my-project-leadgen scrape --limit 50
# Step 2: enrich with Apify website crawler
doppler run --project my-project-b2b-leadgen --config dev -- \
my-project-leadgen enrich
# Step 3: generate Claude drafts
doppler run --project my-project-b2b-leadgen --config dev -- \
my-project-leadgen draft
# Step 4: review + send (Rule-6 gated, one at a time)
doppler run --project my-project-b2b-leadgen --config dev -- \
my-project-leadgen reviewleads.db daily_usage)usage first to check remaining reveals before scraping# Pending drafts count
sqlite3 ~/Projects/my-project-b2b-leadgen/leads.db \
"SELECT count(*) FROM drafts WHERE status='pending';"
# Today's sends
sqlite3 ~/Projects/my-project-b2b-leadgen/leads.db \
"SELECT d.subject, l.email, s.sent_at FROM sends s
JOIN drafts d ON d.id=s.draft_id
JOIN leads l ON l.id=d.lead_id
WHERE date(s.sent_at)=date('now');"Per ops-rules Rule 6: every outbound send is one draft, one approval, one send, only through the host's approved outbound gate. A local file, shell token or counter is defense in depth at most, never the owner's consent. Each draft needs its own native approval on the latest shown text.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.