MailerLite

ReviewAudited by ClawScan on May 16, 2026.

Overview

This skill transparently routes MailerLite management through ClawLink and includes confirmation steps for writes, but users should recognize it delegates access to a third-party integration and can change email marketing data.

Before installing, verify that you trust the ClawLink plugin and service, connect only the MailerLite account you intend to manage, and carefully review previews before approving subscriber changes, imports, campaign sends, or other broad marketing actions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If confirmed, the agent may make real changes in the user's MailerLite account, including external-facing or bulk marketing actions.

Why it was flagged

The skill can invoke MailerLite tools that change subscribers, groups, campaigns, or sends, but it explicitly requires preview and user confirmation for writes or confirmation-marked actions.

Skill content
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user.
Recommendation

Review previews carefully and only approve subscriber imports, group changes, campaign sends, or other bulk actions when the target audience and effect are clear.

What this means

The connected ClawLink account and MailerLite connection determine what the agent can read or change.

Why it was flagged

The skill relies on delegated ClawLink/MailerLite account access rather than local API keys; this is expected for the integration, but it grants authority over the connected MailerLite account.

Skill content
ClawLink ... handles hosted connection flows and credentials so you don't need to configure MailerLite API access yourself.
Recommendation

Connect only the intended MailerLite account, use the least privileges available, and revoke the ClawLink connection when no longer needed.

What this means

The actual runtime behavior depends on the ClawLink plugin and service, not just this SKILL.md file.

Why it was flagged

The skill is instruction-only but depends on a separate plugin installed from ClawHub; this is disclosed and user-directed, though the plugin code is not included in this scan.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the plugin only from the expected ClawHub source and review ClawLink documentation/source if you need assurance about the integration layer.

What this means

MailerLite integration requests and related account data may pass through ClawLink as part of normal operation.

Why it was flagged

The skill discloses a gateway-style communication path between OpenClaw, the local ClawLink plugin, and claw-link.dev for credentials and integration actions.

Skill content
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Recommendation

Use ClawLink only if you are comfortable with that hosted integration service mediating MailerLite access, and avoid approving unnecessary data exports or broad actions.