Email Welcome Sequence

• Verdict: Pass
• Analyzed: May 3, 2026, 4:56 AM
• Findings: 0
• Version: 1.0.0
• Hash: c1a6dd7024061dd50a65655bef104e95ad67ca75251e0b2f18c7aec233173c60
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: email-welcome-sequence Version: 1.0.0 The 'email-welcome-sequence' skill is a pure prompt-flow bundle designed for generating marketing email content. It contains no executable code, scripts, or external dependencies, and its instructions in SKILL.md explicitly prohibit the agent from performing network calls, running code, or requesting sensitive credentials.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

NoteMedium Confidence

What this means

If the platform asks for credentials or payment-related permissions for this skill, that would exceed what the reviewed skill content appears to need.

Why it was flagged

These labels imply sensitive account or payment authority, which is not proportionate to a prompt-only email drafting skill; however, no provided file requests credentials, purchases, APIs, or executable behavior.

Skill content

- can-make-purchases
- requires-sensitive-credentials

Recommendation

Install only as a prompt-writing helper, and decline or investigate any request for credentials, payment authority, or external-service access.