MailerLite
ReviewAudited by ClawScan on May 16, 2026.
Overview
This skill transparently routes MailerLite management through ClawLink and includes confirmation steps for writes, but users should recognize it delegates access to a third-party integration and can change email marketing data.
Before installing, verify that you trust the ClawLink plugin and service, connect only the MailerLite account you intend to manage, and carefully review previews before approving subscriber changes, imports, campaign sends, or other broad marketing actions.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If confirmed, the agent may make real changes in the user's MailerLite account, including external-facing or bulk marketing actions.
The skill can invoke MailerLite tools that change subscribers, groups, campaigns, or sends, but it explicitly requires preview and user confirmation for writes or confirmation-marked actions.
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user.
Review previews carefully and only approve subscriber imports, group changes, campaign sends, or other bulk actions when the target audience and effect are clear.
The connected ClawLink account and MailerLite connection determine what the agent can read or change.
The skill relies on delegated ClawLink/MailerLite account access rather than local API keys; this is expected for the integration, but it grants authority over the connected MailerLite account.
ClawLink ... handles hosted connection flows and credentials so you don't need to configure MailerLite API access yourself.
Connect only the intended MailerLite account, use the least privileges available, and revoke the ClawLink connection when no longer needed.
The actual runtime behavior depends on the ClawLink plugin and service, not just this SKILL.md file.
The skill is instruction-only but depends on a separate plugin installed from ClawHub; this is disclosed and user-directed, though the plugin code is not included in this scan.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the expected ClawHub source and review ClawLink documentation/source if you need assurance about the integration layer.
MailerLite integration requests and related account data may pass through ClawLink as part of normal operation.
The skill discloses a gateway-style communication path between OpenClaw, the local ClawLink plugin, and claw-link.dev for credentials and integration actions.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Use ClawLink only if you are comfortable with that hosted integration service mediating MailerLite access, and avoid approving unnecessary data exports or broad actions.
