Email Sequence Pack

• Outcome: Review
• Latest audit: Sep 16, 2026 · 8:04 AM UTC
• Version: 2.2.0

Overview

This skill appears to be a thin marketing page for off-platform paid email-marketing assets, with claims about scripts and automation that are not present in the reviewed package.

Review this carefully before installing. The inspected package does not contain the templates or scripts it advertises, and any files obtained through Telegram, PayPal, or crypto payment would be outside this review. Do not run externally delivered Python or JavaScript files unless they receive a separate security review, and do not use the skill for bulk email sending without explicit recipient consent and human review.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

Findings (1)

other

Warning

• Location: SKILL.md:24

Finding

Deceptive External Payment Solicitation for Assets Absent from the Package

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 24-48
Vulnerability Type: Misleading monetization and external payment solicitation
Risk Level: Medium

The skill advertises a paid version through PayPal, Telegram, and a cryptocurrency wallet while claiming delivery of templates, scripts, examples, and 18 files. The audited project contains only SKILL.md; none of the advertised scripts or other assets are present for review or verification.

Complete Evidence

markdown

## What You Get in the Pro Version

The Pro version (available on Telegram: @Cofi_ClawSkill_Bot) includes everything above plus:

- **8 complete templates** (welcome, promo, abandoned cart, re-engagement, newsletter, subject line swipe file, CTA library, timing guide)
- **Framework library** — AIDA, PAS, BAB, StoryBrand applied to email
- **20+ subject line formulas**
- **50+ CTAs** organized by conversion stage
- **3 real campaign examples** (skincare, coding bootcamp, fashion)
- **4 Python/JS scripts** (sequence generator, CSV processor, A/B test calculator, cron scheduler)
- **18 files total** of ready-to-use content
- **Lifetime access** — no subscriptions, no extra fees
- **Instant delivery** — pay via crypto or PayPal, receive file immediately

## 🚀 Upgrade to Pro — $4.99 (Lifetime)

**What you get in Pro:**
• All templates + Python scripts + real examples (18 files)
• Lifetime access & updates — no subscription, no extra fees
• Instant delivery after payment

**[💳 Buy Pro $4.99 via PayPal →](https://paypal.me/cofi295/4.99)**

Or pay with **USDT (BEP-20)**:
`0x2927fdf1d705092cf881e1287a71ac56511b550d`

Technical Analysis

This is not an embedded-code vulnerability and does not match T01–T09. It is a social-engineering and deceptive-commerce risk. The skill uses unverified feature claims as inducement to direct users to off-platform payment and communication channels.

The package description add ...[truncated 2051 chars]

Remediation

View remediation

Remediation Suggestions

1. Remove PayPal, cryptocurrency, and Telegram payment solicitations from the skill package unless explicitly permitted and verified by the distribution platform.
2. Correct the description so that it lists only files and functionality actually included in the reviewed package.
3. Include all advertised templates and scripts in the package so they can be audited before users are asked to execute or purchase them.
4. Distribute paid content through a platform-managed marketplace with seller verification, clear refund terms, receipts, and buyer protection.
5. Avoid direct cryptocurrency payment requests for digital delivery, particularly where no enforceable refund or dispute process exists.
6. Add clear seller identity, support, delivery, refund, and privacy information.
7. Subject any subsequently delivered Python or JavaScript files to a separate security review before execution.
8. Clearly distinguish free package capabilities from optional paid content without implying that absent assets are included in the installed skill.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

Advertising auto-send, CSV upload, and scheduled delivery without any disclosure of data handling, recipient consent, review steps, or send safeguards is dangerous because these features imply bulk messaging and processing of contact data. In the context of an email-marketing skill, this raises spam, privacy, accidental mass-send, and unauthorized outreach risks, especially if an agent interprets the description as permission to automate delivery.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The skill manifest materially shifts from describing a content-generation utility to soliciting payment through PayPal, Telegram, and crypto, which is unrelated to the declared runtime purpose of the skill. This creates a deceptive trust boundary: users or agents may invoke the skill expecting email-sequence help but instead be funneled to off-platform commerce and contact channels, increasing phishing, fraud, and policy-evasion risk.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The invocation examples are extremely broad and can cause the skill to activate for generic writing requests without clear boundaries, user confirmation, or scope checks. Ambiguous triggering increases the chance of accidental invocation, unintended data use, or inappropriate automation in contexts where the user did not explicitly ask to use this specific skill.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.