Product Sampling Strategy

PassAudited by ClawScan on May 11, 2026.

Overview

This appears to be a benign planning guide for sampling campaigns, with the main caution that using it operationally may involve customer data, tracking pixels, and CRM/e-commerce changes.

This skill is reasonable to use as a planning template. Before letting an agent act on the plan, review any use of customer lists, demographics, tracking pixels, discount codes, CRM tags, direct mail lists, or survey data. Keep permissions limited, get explicit approval for account changes, and follow the included privacy, consent, GDPR, CAN-SPAM, and legal checks.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If connected to e-commerce, analytics, or CRM tools, an agent could change campaign tracking or customer-record configuration.

Why it was flagged

These are purpose-aligned marketing setup steps, but they would alter tracking and customer-management systems if an agent executed them through connected tools.

Skill content
Pixel tracking: Install conversion pixels on thank-you pages ... CRM tagging: Flag sample recipients for lifecycle tracking
Recommendation

Use the skill for planning by default, and require explicit approval plus scoped access before creating discount codes, pixels, CRM tags, or similar account changes.

What this means

Using real customer or prospect data could expose private business and personal information if access is too broad.

Why it was flagged

The campaign workflow may require access to customer purchase history, engagement data, and business accounts, which is sensitive but aligned with the skill's marketing purpose.

Skill content
Purchase history | 30% | [CRM / Shopify / etc.] ... Engagement score | 25% | [Email platform / analytics]
Recommendation

Provide only the minimum necessary data, prefer aggregated or anonymized exports when possible, and ensure customer consent and legal compliance before using CRM, Shopify, email, or analytics data.