alexey-marketing-skills

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a content-only marketing playbook collection with no code, install steps, or credential requests, though its embedded source metadata is inconsistent with the registry listing.

This appears safe to use as a marketing reference library. Before installing, note the source metadata inconsistency and review any generated marketing, analytics, ad, or social recommendations before applying them to real campaigns.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

39/39 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

A user may want to verify where the playbook content came from, but the artifacts do not show code execution, credential use, or data access.

Why it was flagged

The embedded metadata identifies a different owner, slug, and version than the registry listing for alexey-marketing-skills v1.0.0, while SKILL.md also says the content is vendored from another upstream project. This creates provenance ambiguity, but no executable code or install mechanism is present.

Skill content
"owner": "jchopard69", "slug": "marketing-skills", "latest": { "version": "0.1.2", "commit": "https://github.com/clawdbot/skills/commit/19cc58bdccab3fbf43bb4e17a3f855d707133d55" }
Recommendation

Treat this as a content reference skill and verify the publisher/source if provenance matters to your workflow.