Back to skill
Skillv2.1.1
ClawScan security
Email Sequence · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 9, 2026, 7:28 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's files and runtime instructions are consistent with an email-sequence/design assistant: it contains guidance plus a local analyzer script, requests no credentials, and has no install step or network calls.
- Guidance
- This skill appears coherent and focused on email-sequence design. Before installing: (1) confirm any .claude/product-marketing-context.md or other marketing-context files the skill may read do not contain secrets or unrelated private data, (2) if you expect the agent to execute scripts, validate that running the local Python analyzer is acceptable in your environment, and (3) as always, avoid granting unrelated credentials to skills — this one does not request any. If you want extra assurance, open and inspect the included scripts/sequence_analyzer.py and the SKILL.md to verify there are no unexpected behaviors.
Review Dimensions
- Purpose & Capability
- okName/description match the included assets: SKILL.md provides email-sequence design guidance and references, and scripts/sequence_analyzer.py implements a local quality/spam/pacing analyzer that fits the stated purpose. No extraneous credentials, binaries, or unrelated integrations are requested.
- Instruction Scope
- noteSKILL.md tells the agent to read .claude/product-marketing-context.md (if present) and to 'Load marketing-context' for brand/ICP voice before writing. This is coherent for tailoring email copy, but it does instruct the agent to read a local context file — verify that file doesn't contain secrets or unrelated private data.
- Install Mechanism
- okNo install spec is present (instruction-only). The included Python analyzer is a lightweight, local utility with no network calls, so there is no remote download/execution risk from an installer.
- Credentials
- okThe skill declares no required environment variables, no credentials, and no config paths beyond optionally reading a product-marketing-context file. The requested access is proportional to producing personalized, brand-aligned email sequences.
- Persistence & Privilege
- okalways is false and the skill does not request system-wide changes or modification of other skills. Nothing indicates it requires elevated or persistent privileges beyond normal skill execution.