Marketing OS
v1.0.0AI Agent 营销操作系统 — 包含 Virtual CMO（战略大脑）和 Marketing Operator（执行引擎），提供市场分析、策略制定、Campaign 规划与执行追踪全链路能力。
⭐ 0· 112·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Virtual CMO + Marketing Operator) align with the provided prompts, schemas, workflows, and memory files. Nothing in the bundle asks for unrelated capabilities (no AWS/DB credentials, no unexpected binaries). Adapters are described but disabled by default in configs; they are appropriate for the described integration points.
Instruction Scope
SKILL.md and included prompts instruct the agent to read/write local memory (memory/*.json) and logs, to load prompts, validate I/O against schemas, and call adapters when configured. Reading/writing memory and logs is coherent with a campaign-management skill; however, this is a data-handling surface the user should review (what is persisted, retention settings, and PII handling). Adapters mention external APIs and credential references — those will only be used if the user configures endpoints and credentials.
Install Mechanism
Instruction-only skill with no install spec and no code files to execute. No remote downloads or package installs are present, which minimizes supply-chain risk.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths outside its own package. Adapter docs reference auth methods (api_key, oauth2) and credentials_ref placeholders, which are expected for optional external integrations but are not demanded by the skill as shipped.
Persistence & Privilege
always:false and default autonomous invocation are unchanged (normal). The skill explicitly persists to memory/*.json and logs/*.json; this is legitimate for its purpose but increases data persistence surface. The runtime config includes gates (requires_human_approval entries) to prevent dangerous automatic actions like external_api_integration or launching paid campaigns when correctly applied.
Assessment
This package appears to do what it says: it is an instruction-only Marketing OS that reads/writes local memory and logs, uses structured prompts and schemas, and defines optional adapters for external APIs. Before enabling it in production: 1) Keep auto_mode disabled initially and test workflows manually. 2) Inspect and edit configs/system.config.json — verify allowed_actions, requires_human_approval, memory retention, and adapters are set to disabled unless you intentionally configure them. 3) If you enable adapters, provide endpoints and credentials only to trusted services and store credentials in your secure store (the adapters reference credentials_ref). 4) Confirm PII handling: the CRM adapter warns PII should not be stored in memory; ensure your runtime enforces that. 5) Review logging and memory retention policies (memory/*.json and logs/*.json) to meet privacy/compliance needs. 6) Validate generated content and strategy outputs with human reviewers before publishing or spending budget. These precautions will reduce risk while using the skill.Like a lobster shell, security has layers — review code before you run it.
analyticsvk9772hf6vjvy8btmwrr0hs30ch83djndcampaign-managementvk9772hf6vjvy8btmwrr0hs30ch83djndcmovk9772hf6vjvy8btmwrr0hs30ch83djndexecutionvk9772hf6vjvy8btmwrr0hs30ch83djndgrowthvk9772hf6vjvy8btmwrr0hs30ch83djndlatestvk9772hf6vjvy8btmwrr0hs30ch83djndmarketingvk9772hf6vjvy8btmwrr0hs30ch83djndopenclawvk9772hf6vjvy8btmwrr0hs30ch83djndstrategyvk9772hf6vjvy8btmwrr0hs30ch83djnd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.