alexey-marketing-growth-playbook
v1.0.0Provides 23 marketing modules with checklists, frameworks, and copy/paste deliverables for CRO, SEO, copywriting, analytics, ads, launches, pricing, and soci...
⭐ 0· 290·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (marketing growth playbooks) aligns with the included files: 23 marketing modules providing checklists, frameworks, and copy templates. However, there are provenance inconsistencies: the top-level SKILL.md front-matter and included _meta.json use the slug/name "marketing-skills" while the registry entry is "alexey-marketing-growth-playbook" and owner IDs differ. The SKILL.md also states the content was vendored from coreyhaines31/marketingskills. These mismatches don't break the purpose but raise questions about packaging and authorship.
Instruction Scope
Runtime instructions are limited and explicit: pick a module in references/, read its SKILL.md, and produce deliverables (drafts, checklists). The included module docs provide marketing guidance and example code snippets (e.g., GA4 gtag/dataLayer examples) but do not instruct the agent to read arbitrary system files, environment variables, or contact external hidden endpoints. No scope creep (no unexpected file or credential access) is present in the runtime instructions.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute. That is the lowest-risk install profile and matches the stated simple, content-driven purpose.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The content references common third-party services (GA4, GTM, analytics tools) but only for guidance and example snippets — there are no requests for secrets or unrelated credentials.
Persistence & Privilege
always is false and there is no special persistence requested. disable-model-invocation is false (normal for skills). The skill does not request system-wide changes or modify other skills. Autonomous invocation is allowed by default and is not by itself a red flag here.
What to consider before installing
This skill appears to be exactly a bundled set of marketing playbooks and the instructions are scoped to reading local reference files and producing copy/checklists. However, before installing or relying on it you should: 1) confirm provenance — ask the publisher for the original source, license, and why registry metadata (slug/version/owner) differs from the packaged _meta.json and SKILL.md; 2) verify there are no external fetches or hidden install steps (the package is instruction-only, but mismatched metadata suggests it may have been repackaged); 3) if you will copy analytics snippets into production, review them for PII safety and consent/conspliance implications (cookie/consent requirements for GA4/GTM); 4) test the skill in a non-production/sandbox environment first and avoid giving it any credentials or PII; and 5) if provenance remains unclear or the author cannot confirm licensing/ownership of vendored content, consider not installing or request a version with clear author/license information. Additional information that would increase confidence: a matching homepage or repository link, consistent ownerId/slug/version across registry and _meta.json, and an explicit license or attribution statement from the publisher.Like a lobster shell, security has layers — review code before you run it.
latestvk975p7kpkdk1aa2dynxen2hjcx820kn4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.