Kit
PassAudited by ClawScan on May 13, 2026.
Overview
This skill is coherent for managing Kit through ClawLink, but users should notice that it requires a ClawLink plugin/account connection that can access and change their Kit email-marketing data with confirmation.
This skill appears safe to install if you intend to manage Kit via ClawLink. Before using it, make sure you trust the ClawLink plugin and service, connect only the Kit account you intend to manage, and approve previews carefully before any email send, subscriber import, or bulk audience change.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the plugin extends OpenClaw with ClawLink tools, so the user is trusting that plugin as part of the workflow.
The instruction-only skill depends on a separate plugin install that is not represented as an install spec. The install is disclosed and user-directed, and it is central to the ClawLink integration.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the ClawLink plugin only from the intended ClawHub source and review the plugin/source if you need higher assurance.
Once paired, OpenClaw can use ClawLink to access Kit capabilities permitted by the user's connected account and scopes.
The skill uses delegated account access through ClawLink and stores a persistent local device credential. This is disclosed and purpose-aligned for accessing the user's connected Kit account.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Use a trusted ClawLink account, review Kit connection permissions, and revoke the ClawLink device or Kit connection if you no longer want the access.
If approved, the skill may change subscriber records, tags, imports, or broadcasts in Kit.
The skill can invoke tools that may send emails or modify audience data. The artifact includes appropriate preview and confirmation requirements for high-impact writes.
Confirm before any send, subscriber import, or bulk audience change.
Carefully review previews and confirmations before approving sends, imports, bulk changes, or other writes.
Kit connection details and tool requests may be handled through ClawLink rather than only locally in OpenClaw.
The skill routes integration setup and dynamic tool use through the ClawLink gateway. This third-party data flow is clearly disclosed and aligned with the integration purpose.
Powered by [ClawLink](https://claw-link.dev), an integration hub for OpenClaw that handles hosted connection flows and credentials
Review ClawLink's documentation, verification page, and privacy/security posture before connecting sensitive email-marketing accounts.
