Email Marketing Tool

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent instruction-only email marketing skill, but bulk or scheduled email sends and provider account use should be confirmed carefully before use.

Install only if you intend to manage email campaigns. Before using it, confirm the recipient list, template, schedule, unsubscribe handling, and provider credentials, and require explicit approval for any bulk or automated send.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken or unauthorized campaign could reach many recipients, harm sender reputation, or create compliance issues.

Why it was flagged

The skill explicitly supports bulk email sending to a contact list. This is core to the stated purpose, but a wrong list, subject, or template could send many unintended messages.

Skill content
发送邮件 列表=customers.csv 模板=promo.html 主题=限时优惠
Recommendation

Require explicit user confirmation before any bulk, scheduled, or automated send, and verify recipient consent, unsubscribe handling, and message content.

What this means

If connected to a real provider account, the skill could send email using that account and consume quota or affect the account's reputation.

Why it was flagged

Using these providers normally requires sender account credentials or delegated sending privileges. The artifacts do not show credential misuse, but the authority is sensitive.

Skill content
## 支持服务
- SMTP 服务
- SendGrid
- Mailgun
- 阿里云邮件
- 腾讯邮件
Recommendation

Use least-privilege provider credentials where possible, keep API keys out of prompts and shared files, and review provider permissions before sending.

What this means

Customer lists or templates could expose sensitive recipient information if shared with the wrong service or reused in the wrong campaign.

Why it was flagged

The skill processes customer/contact list files as campaign context. This is purpose-aligned, but such files may contain personal or business-sensitive recipient data.

Skill content
管理邮件列表 文件=customers.csv 操作=去重,验证,分段
Recommendation

Limit input files to the intended recipients, avoid unnecessary personal data, and review any generated reports before sharing them.