Newsletter Growth Hacker

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users have less external context for who maintains the code and what installation/runtime assumptions apply.

Why it was flagged

The package includes runnable scripts but does not identify an upstream homepage/source or an install specification. This is a provenance and packaging notice, not evidence of malicious behavior.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill; Code file presence: 4 code file(s)
Recommendation

Review the included scripts before running them, install only from a trusted registry/source, and prefer a package that declares its Python runtime requirement and homepage.

What this means

Running the command executes local code on the user's machine, though the shown code is aligned with the newsletter analysis purpose.

Why it was flagged

The skill asks the user to manually execute a local Python entry point. Local execution is central to the advertised tool and is not hidden or automatic.

Skill content
cd skills/newsletter-growth-hacker/scripts
python main.py
Recommendation

Run it only from the expected skill directory, without administrator privileges, and after reviewing the included code if the source is unfamiliar.

What this means

Generated subject lines may pressure or persuade readers; inaccurate urgency or authority claims could harm trust or violate email-marketing rules.

Why it was flagged

The skill includes urgency, authority, and social-proof subject-line templates. These are disclosed and purpose-aligned for newsletter marketing, but could mislead recipients if used with false claims.

Skill content
"最后{hours}小时:{offer}即将结束" ... "为什么{authority}都选择{topic}" ... "紧急:{important_update}"
Recommendation

Use these templates only when the urgency, authority, offer, and social-proof claims are accurate, and keep unsubscribe/consent requirements in place.