Business Tools Pack

PassAudited by ClawScan on May 10, 2026.

Overview

The pack itself has no runnable code and only lists user-run installs, but the separate skills it installs may use API keys and automation, so review those skills individually.

This pack appears benign as supplied because it contains no code and no automatic install mechanism. Treat it as a directory of other skills: inspect each referenced skill before installing, especially email automation, testimonials, customer research, and AutoSignals, and only provide API keys after confirming the individual skill's scope and approval controls.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the pack's recommended skills may add capabilities that were not assessed in this review.

Why it was flagged

The reviewed package is instruction-only and directs the user to install multiple separate skills; those skills' code and metadata are outside the supplied artifacts.

Skill content
clawhub install analytics-tracking-dv
clawhub install autosignals-davinci
clawhub install customer-research-dv
clawhub install email-automation-dv
Recommendation

Review each referenced skill's own artifacts, permissions, credentials, and install steps before installing or using it.

What this means

If you install and configure those skills, they may be able to create or send email automations through your provider account.

Why it was flagged

Some referenced skills may need email-service API keys, which can grant authority over mailing-list or campaign accounts.

Skill content
Some skills require API keys: ConvertKit/Mailchimp (email), Python 3.8+ (AutoSignals)
Recommendation

Use least-privileged API keys where possible, test on a non-production list first, and confirm the individual email skill clearly requires approval before live sends.

What this means

If used without clear limits, a long-running automation could consume resources or produce business/financial recommendations beyond what you intended.

Why it was flagged

A referenced skill is described as autonomous and continuous, which is sensitive even though this pack does not implement the loop itself.

Skill content
An autonomous loop that continuously optimizes trading signal algorithms through agent-driven experimentation. Set it running, come back to improved signals.
Recommendation

Before using the AutoSignals skill, verify how it starts, stops, logs activity, and prevents live trading or other financial actions without explicit approval.