Business Tools Pack

PassAudited by ClawScan on May 1, 2026.

Overview

This no-code pack is transparent about being a bundle of install instructions, but the separate skills it points to may need sensitive account access and autonomous operation.

Before using the Quick Start, review each individual skill named by the pack, especially the email, testimonial, and autonomous trading-signal tools. Grant only scoped credentials, test on limited data first, and ensure any autonomous or scheduled workflow has clear approval and stop controls.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the pack's recommended skills may add new capabilities and permissions beyond this no-code wrapper.

Why it was flagged

The pack's main action is to direct the user to install seven separate skills whose contents are not part of this artifact set.

Skill content
clawhub install analytics-tracking-dv ... clawhub install first-principles-dv
Recommendation

Review each referenced skill's own artifacts, source, permissions, and credential requirements before installing it.

What this means

A downstream email skill could affect customer communications or mailing-list data if given broad API keys.

Why it was flagged

Email-provider API keys grant delegated access to send or manage marketing email; this is expected for email automation but sensitive.

Skill content
Some skills require API keys: ConvertKit/Mailchimp (email)
Recommendation

Use least-privilege API keys where possible, test with a limited audience first, and confirm each email action before deployment.

What this means

Long-running autonomous workflows can consume resources or make repeated changes if not bounded.

Why it was flagged

The README advertises a downstream skill that can run an autonomous optimization loop, which is purpose-aligned but should have clear start, stop, and scope controls.

Skill content
An autonomous loop that continuously optimizes trading signal algorithms through agent-driven experimentation. Set it running, come back to improved signals.
Recommendation

Only run autonomous downstream skills with explicit limits, monitoring, and a clear stop condition.