Ai Automation Agency Kit
ReviewAudited by ClawScan on May 12, 2026.
Overview
This is mostly a prompt-only business kit, but its delivery playbook tells users to handle client/admin credentials without clear security safeguards.
Before using this skill with real clients, edit the generated delivery templates so they do not ask for raw credentials in email or shared docs. Require least-privilege, client-owned access, secure secret sharing, testing/sign-off, and revocation after the project or retainer ends.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users could unintentionally ask clients to share admin passwords or store credentials in emails/docs, increasing the risk of account compromise or lingering unauthorized access.
The prompt explicitly directs generated delivery materials to handle credentials and admin access, but it does not require secure transfer, least-privilege permissions, secret managers, audit trails, or revocation.
"access and logistics (accounts, credentials, shared drive)"; "client admin credentials are transferred and tested"; "Provide everything: links, credentials, documentation folder"
Revise the playbook to avoid collecting raw passwords; use client-owned accounts, scoped OAuth/service accounts, password managers or secret vaults, documented approvals, and access revocation at project close.
Generated workflows could change or move business data if a user implements them without review or testing.
The skill guides users to build automations across business tools and data pipelines. This is purpose-aligned and user-directed, but these workflows can affect real client operations if implemented incorrectly.
"SOP 1: Multi-Step Zapier Workflow Setup"; "SOP 5: Data Pipeline Between Two Systems (e.g., CRM → Sheets → Airtable)"
Use sandbox/test modes, explicit client sign-off, backups, rollback plans, and change-control steps before enabling automations in production systems.