B2C Mobile App Marketing Coach
ReviewAudited by ClawScan on May 1, 2026.
Overview
This is a coherent marketing-coach skill, but it asks for social-posting credentials and includes guidance for public posting, scheduling, and performance memory that users should control carefully.
Before installing, be sure you are comfortable giving the skill a Post Bridge API key and letting it help create or post social content. Keep posts as drafts until reviewed, scope credentials to the intended accounts, avoid undisclosed promotional content, and only enable memory or scheduled workflows if you explicitly want them.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may create or post social content that affects your app’s brand, audience, and platform account history.
The skill explicitly positions the agent as able to post marketing content, which is purpose-aligned but can create public or account-level impact if done without review.
You don't just post content ... When they have content ready, post it.
Use draft-only posting where possible, require human approval before publishing, and limit the posting tool to the intended brand accounts.
Anyone or anything using this key may be able to act through the connected posting service within the key’s permissions.
The skill requires a Post Bridge API key, which is expected for social posting but represents delegated access to an external posting service.
requires:\n env:\n - POST_BRIDGE_API_KEY\n primaryEnv: POST_BRIDGE_API_KEY
Use a dedicated, least-privilege API key; connect only the accounts needed; rotate the key if the skill is removed or no longer trusted.
Marketing performance history, captions, account details, or campaign notes could be reused later if stored in memory.
The reference playbook recommends persistent memory for post-performance data, which is useful for marketing iteration but can retain business data across sessions.
Memory files = performance data that persists between sessions.\n- Every post, view count, insight logged
Decide what data may be saved, where it is stored, and when it should be deleted; avoid storing credentials or sensitive business information in memory files.
If adopted, scheduled jobs could continue generating drafts or posting activity outside an interactive session.
The case-study workflow describes scheduled automation. This is relevant to content operations, but background posting or generation should be explicitly user-approved.
Runs on cron jobs at peak times
Only enable scheduled workflows intentionally, keep a visible stop mechanism, and prefer scheduled draft creation rather than automatic publication.
Audiences or platforms could view undisclosed promotional posts as deceptive, which may harm trust or violate platform rules.
The marketing guidance encourages UGC-style promotional content. That is related to the skill’s purpose, but users should ensure promotional relationships and brand ownership are not misleading.
Feels like genuine discovery, not an ad
Follow advertising-disclosure rules, platform terms, and brand transparency practices when publishing promotional content.