Channel Partner Program

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: afrexai-channel-partner Version: 1.0.0 The skill bundle consists of `_meta.json`, `SKILL.md`, and `README.md`. All files contain only descriptive text, tables, and external links related to building and managing a channel partner program. The `SKILL.md` and `README.md` provide extensive documentation and example prompts for an AI agent, all of which are benign and directly aligned with the stated purpose of the skill. There is no executable code, no evidence of prompt injection attempts designed to subvert the agent, no instructions for data exfiltration, persistence, or any other malicious activity. The external links are presented as informational resources for the user, not as commands for the agent to fetch or execute.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent could recommend or potentially perform business-impacting actions such as approving deal registrations or blocking CRM activity if given the necessary tools.

Why it was flagged

The skill includes workflow actions that could change CRM state or partner-account handling if an agent has connected business tools.

Skill content
Approval SLA: 48 hours or auto-approved ... Direct team targeting partner accounts | Block in CRM, escalate to channel chief | Same day
Recommendation

Use this as a planning framework, and require explicit human approval before any CRM changes, deal approvals, partner restrictions, or conflict-resolution actions are applied.

What this means

If connected to CRM or partner-portal tools, the agent may need access to customer, pipeline, attribution, and partner-performance data.

Why it was flagged

The skill is intended to work with CRM and partner-program records, which are sensitive business systems even though no credentials are requested in the artifacts.

Skill content
Partner can't register deals from inbound leads already in your CRM ... Configure CRM for partner attribution
Recommendation

Grant only the minimum CRM or partner-system permissions needed, prefer read-only access for analysis, and separately approve any write actions.