v0.1.1

Instantly

BenignClawScan verdict for this skill. Analyzed May 2, 2026, 8:31 PM.

Analysis

This is a coherent Instantly integration through ClawLink, but users should understand it depends on a third-party plugin/service and can make confirmed changes to Instantly account data.

GuidanceThis skill appears purpose-aligned for managing Instantly through ClawLink. Before installing, make sure you trust the ClawLink plugin/service, understand that ClawLink will handle the account connection, and only approve previews for actions you actually want performed in your Instantly workspace.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`

The skill depends on an external plugin that is not part of the provided artifact set. This is purpose-aligned, but users are relying on the plugin's provenance and behavior.

User impactInstalling the plugin grants additional integration tooling outside this instruction-only skill.

RecommendationInstall the ClawLink plugin only from the trusted ClawHub source and review the plugin separately if available.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusNote

SKILL.md

For campaign changes, lead imports, tag changes, webhook changes, API-key management, deletes, or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user.

The skill can invoke high-impact Instantly operations, including deletes and workspace/API-key-related changes, but it also requires preview and user confirmation before those actions.

User impactIf approved, actions could modify campaigns, leads, tags, webhooks, or other workspace settings in the user's Instantly account.

RecommendationReview previews carefully before approving writes, especially deletes, webhook changes, campaign activation/pausing, imports, and credential-related actions.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityMediumConfidenceHighStatusNote

SKILL.md

The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.

The skill uses delegated ClawLink/Instantly account access and stores a local device credential. This is disclosed and expected for the integration, but it is sensitive account authority.

User impactA connected ClawLink account may allow the agent to access or operate on the user's Instantly workspace according to the granted permissions.

RecommendationUse the minimum necessary Instantly permissions, do not paste raw credentials into chat, and revoke the ClawLink connection when it is no longer needed.