Skillv1.1.0

ClawScan security

Cold Outreach Pack · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 13, 2026, 1:42 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only outreach/template pack whose requested capabilities, files, and instructions are consistent with its stated purpose and do not request extra credentials, installs, or system access.
Guidance: This skill is internally coherent and contains only templates and prompts. Before installing, consider: (1) compliance — using these templates for mass unsolicited messaging can violate anti-spam laws and platform policies (LinkedIn, email providers); (2) privacy — avoid pasting or sending sensitive personal data into any external model/service when personalizing messages; (3) claims verification — marketing lines like “AI-powered personalization” are promotional and not implemented by this package itself; verify how you plan to perform personalization (what service or tool will process recipient data). If you intend to automate sending messages, review the sending tool's required credentials and privacy settings separately — this skill does not request or manage those credentials.

Purpose & Capability: okThe name/description (cold email, LinkedIn outreach, follow-ups) matches the shipped templates and prompt files. The skill requires no binaries, env vars, or config paths — which is appropriate for a templates-and-prompts pack.
Instruction Scope: okSKILL.md and the prompt/template files only instruct how to write messages, timing, and tactics. They do not instruct the agent to read files, access environment variables, make network calls, or transmit data to any hidden endpoints.
Install Mechanism: okNo install spec or code is provided (instruction-only). Nothing is downloaded or written to disk by an installer, which minimizes installation risk.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. That is proportionate for a templates/prompt pack.
Persistence & Privilege: okalways is false and the skill does not request persistent system-level privileges or modification of other skills. Autonomous invocation is allowed by default but is not combined with elevated privileges or credential access.