Borrowing it
Nothing to install: this file belongs to Othmane-Khadri/YALC-the-GTM-operating-system. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Othmane-Khadri/YALC-the-GTM-operating-system/main/.claude/skills/fullenrich-plg-reverse-lookup/SKILL.mdgit clone --depth 1 https://github.com/Othmane-Khadri/YALC-the-GTM-operating-systemWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/othmane-khadri/yalc-the-gtm-operating-system/fullenrich-plg-reverse-lookup)<a href="https://agentmods.dev/skills/othmane-khadri/yalc-the-gtm-operating-system/fullenrich-plg-reverse-lookup"><img src="https://agentmods.dev/badge/skills/othmane-khadri/yalc-the-gtm-operating-system/fullenrich-plg-reverse-lookup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/othmane-khadri/yalc-the-gtm-operating-system/fullenrich-plg-reverse-lookup"><img src="https://agentmods.dev/badge/skills/othmane-khadri/yalc-the-gtm-operating-system/fullenrich-plg-reverse-lookup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01270 |
| Opus 5 | $0.00000 | $0.00635 |
| Sonnet 5 | $0.00000 | $0.00254 |
| Haiku 4.5 | $0.00000 | $0.00127 |
Grade A, and why
fullenrich-plg-reverse-lookup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.
FullEnrich PLG Reverse Lookup
When a free trial signup hits your product, you have ~5 minutes before they cool off. This skill turns a signup email into an identified person + LinkedIn profile + company in real time, using FullEnrich's reverse email lookup.
Two install paths in one repo:
- Path A (CLI batch): point it at a
signups.csv, get an enriched JSON back. Cron-friendly. - Path B (hosted webhook): deploy the included
api/folder to any Vercel-compatible host. Receives POST{ email }, runs reverse lookup, writes the enriched record to a JSONL log and optionally forwards it to any URL you specify. Pure FullEnrich output; wire downstream to whatever stack you run.
When This Skill Applies
- "set up FullEnrich reverse lookup for trial signups"
- "PLG enrichment webhook"
- "who are these emails"
- "identify free trial signups via FullEnrich"
- "deploy a Vercel webhook for trial signups"
What This Skill Does NOT Do
- Does not capture signup events itself. You wire your product's signup hook (your backend, your auth provider, your payment processor, whatever fires when a new user is created) to either path A's CSV or path B's webhook URL.
- Does not write outreach copy.
- Does not spend credits without explicit user approval (CLI mode). See "Credit safety contract" below.
Credit safety contract (MANDATORY)
This skill spends FullEnrich credits, which cost real money. Safeguards (CLI mode):
- Always shows current balance before doing anything.
- Always shows estimated cost of the run.
--max-credits Nceiling (default 100) — auto-trims the email list to fit.- Hard-approval prompt — blocks on stdin until the user types
yes. Non-TTY without--yesaborts. --dry-runmode — parses + dedupes without spending a credit.
Webhook mode is different. It runs unattended in production. Built-in protections there:
MAX_CREDITS_PER_DAYenv var (default 200) — webhook short-circuits with HTTP 429 once exceeded, written to alookup-counter.jsonshadow file in/tmpfor cold-start safety.WEBHOOK_DRY_RUN=1env var — webhook validates payload and logs intent but does NOT call FullEnrich. Use this for the first 24 hours after deploy.- Each webhook invocation logs the running daily total to stdout. Set up a Vercel log alert if you want stricter control.
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .env.example 853 B
- .gitignore 68 B
- api/fullenrich-callback.mjs 123 B runs code
- api/signup.mjs 99 B runs code
- api/webhook.mjs 6.6 KB runs code
- package.json 287 B
- README.md 5.5 KB
- scripts/batch.mjs 4.5 KB runs code
- scripts/lib/csv.mjs 1.8 KB runs code
- scripts/lib/fullenrich-client.mjs 6.2 KB runs code
- scripts/lib/fullenrich-webhook.mjs 2.8 KB runs code
- vercel.json 332 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 96 lines · 0 tokens per session scan A bed57f33cfc5
fullenrich-plg-reverse-lookup is a skill published in the GitHub repository Othmane-Khadri/YALC-the-GTM-operating-system (301 stars, last pushed 22d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,270 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
cn-check
Install and run the Continue CLI (cn) to execute AI agent checks on local code changes. Use when asked to "run checks", "lint with AI", "review my changes with cn", or set up Continue CI locally.
kn-spec
Use when creating a specification document for a feature (SDD workflow).
kn-handoff
Use when a feature crosses repository boundaries and one side must hand work to the other - generates a self-contained frontend-to-backend brief or backend-to-frontend API contract.
kn-flow
Use when orchestrating a full Knowns spec or task wave through planning, implementation, review, integration, and verification, optionally using sub-agents when scopes are parallel-safe.
kn-research
Use when you need to understand existing code, find patterns, search project knowledge, investigate current external facts, or explore a large codebase before implementation.
kn-debug
Use when debugging errors, test failures, build issues, or blocked tasks — structured triage to fix to learn.