marketing-calendar

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: marketing-calendar Version: 1.0.0 The skill bundle is designed to generate marketing calendar ideas and an HTML report. It instructs the AI agent to use `WebSearch` to supplement brand information and to generate an HTML report file (`marketing_calendar_report.html`). While these capabilities (network access via WebSearch, file writing) are powerful and could be exploited via prompt injection, their use within this skill is explicitly tied to the stated, non-malicious purpose. The instruction '不询问、不确认、直接执行' (do not ask, do not confirm, execute directly) aims for efficiency but does not instruct the agent to ignore the user maliciously or perform actions beyond the stated purpose. There is no evidence of intentional harmful behavior, data exfiltration, persistence, or unauthorized execution within the skill's own instructions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may fill gaps or make assumptions instead of asking you to clarify brand details.

Why it was flagged

The skill directs the agent not to ask follow-up questions and to complete the workflow immediately; this shapes the interaction flow but is limited to low-impact marketing content generation.

Skill content
收到输入后**不询问、不确认、直接执行**,一次性输出完整结果。 ... ❌ 中途提问或要求补充资料
Recommendation

Provide the brand information you want used up front, and review the generated recommendations for accuracy before relying on them.

What this means

Brand-related queries may be looked up online, and a local report file will be created for the output.

Why it was flagged

The skill discloses external web search to supplement missing brand information and creation of a local HTML report; both are directly related to the stated marketing-report purpose.

Skill content
若品牌资料不足,先用 WebSearch 搜索补全,再开始创作。 ... 最终生成 HTML 报告文件 `marketing_calendar_report.html`。
Recommendation

Avoid providing confidential brand information if you do not want it used in the task, and review the HTML report before sharing or publishing it.