Content Calendar

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only content planning skill that works through local markdown files, with only minor considerations around persistent notes and optional recurring reviews.

This skill appears safe for local content planning. Before installing, decide whether you want the optional recurring heartbeat review, and avoid putting sensitive revenue, client, or unpublished strategy details into the content files unless you are comfortable with your agent reading them.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If enabled, the agent may regularly review your content planning files and surface reminders without you asking each time.

Why it was flagged

The skill documents an optional recurring heartbeat review. This is disclosed and scoped, but it gives the agent a periodic reminder to inspect the content calendar.

Skill content
Or trigger it via heartbeat by adding to `HEARTBEAT.md`: ... `## Content Calendar (every Monday)`
Recommendation

Only add the HEARTBEAT.md entry if you want recurring reviews, and keep the heartbeat instructions limited to the content files you intend the agent to use.

What this means

Private content plans or revenue information could become part of the agent's working context when using this skill.

Why it was flagged

The advanced workflow can store business revenue details in persistent content planning files that the agent may later read and summarize.

Skill content
Add an optional Revenue column to the pipeline: ... `Revenue Type | Expected | Actual` ... `monthly content revenue summary`
Recommendation

Avoid adding sensitive business details unless needed, and keep the content folder limited to information you are comfortable having the agent process.