Marketing Demand Acquisition

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using this skill with connected marketing accounts could create or change campaigns, workflows, tracking, or budgets.

Why it was flagged

These are purpose-aligned marketing actions, but if an agent has access to live HubSpot or ad-platform tools, they could mutate business accounts or initiate paid campaign spend.

Skill content
Create campaign in HubSpot with proper UTM structure ... Launch with test budget
Recommendation

Require explicit user approval, budget limits, and a final review before launching ads or changing live CRM workflows.

What this means

Users have less external context for who maintains the skill or where the included script originated.

Why it was flagged

The package includes a local Python script but does not provide an upstream source or homepage for provenance verification. The provided script is simple and the static scan reported no suspicious patterns.

Skill content
Source: unknown; Homepage: none; Code file presence: scripts/calculate_cac.py
Recommendation

Review the included script before use and prefer installing skills from maintainers or sources you trust.