Insurance Private Domain Ops

PassAudited by ClawScan on May 11, 2026.

Overview

This is an instruction-only insurance CRM strategy skill with no code or credentials, but users should be careful because its workflows involve sensitive customer data and bulk outreach.

This skill appears safe to install as an instruction-only reference. Before using it with real customer data or live outreach tools, verify the install target, use only authorized and minimized customer records, and require human compliance review before sending insurance marketing or renewal messages.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user pastes or connects real customer records, the agent may process sensitive personal and insurance information.

Why it was flagged

The provided SQL template and segmentation model are designed around personal and insurance-related customer data, including phone numbers, family status, premiums, and claims.

Skill content
customer_id,
    name, phone, city, occupation_level, family_status,
    ...
    SUM(claim_amount) AS total_claim_amount
Recommendation

Use only authorized data, minimize or anonymize customer fields where possible, avoid pasting unnecessary raw PII into prompts, and follow PIPL/company privacy controls.

What this means

Incorrect targeting, wrong policy data, or unapproved messaging could be sent at scale if these workflows are automated without safeguards.

Why it was flagged

The skill describes automated personalized renewal notifications and multi-channel distribution workflows, which could affect many customers if connected to live messaging systems.

Skill content
AI自动发送个性化续期通知(含保单信息) ... 渠道分发:企微首选 → 短信兜底 → 公众号补充
Recommendation

Keep live outreach human-approved, test on small samples, enforce consent and opt-out rules, and require review before sending messages through WeCom, SMS, phone, or public accounts.

What this means

Customers could feel pressured if generated scripts are used without compliance review or accurate disclosure.

Why it was flagged

Some sales scripts use urgency and persuasive framing for insurance renewal or reactivation.

Skill content
保障不能等,我们可以先完成投保,保单生效后您有15天犹豫期,不满意可以全额退保。
Recommendation

Review all generated sales scripts for accuracy, fair presentation of costs and risks, required disclosures, and compliance with insurance sales and consumer-protection rules.

What this means

A user following the README could install a differently named package than expected.

Why it was flagged

The README install target differs from the registry slug shown for this evaluation, which may confuse users about the exact package being installed.

Skill content
npx clawhub install @gechengling/insurance-private-domain-ops-expert
Recommendation

Install from the verified registry entry and confirm the owner, slug, and version before installation.