Viral Restaurant Marketing
v1.0.0Use this skill when a restaurant owner or marketer needs help with: viral TikTok/Instagram content strategy, content calendar generation, hook writing, Googl...
⭐ 0· 53·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (viral restaurant marketing) align with the provided files: SKILL.md, content references, and two JS scripts that generate calendars and hooks. Nothing in the manifest asks for unrelated cloud keys, system binaries, or config paths.
Instruction Scope
Runtime instructions are narrowly scoped to conversational prompts and running the included Node.js scripts to generate calendars/hooks. The SKILL.md does mention integrations (Postiz scheduling, Google Reviews automation, WhatsApp templates) and paid upsells, but those are described as optional services; the repository does not force or include external integration credentials. Recommend verifying that the scripts do not perform any network calls or file reads/writes beyond generating content.
Install Mechanism
No install spec — instruction-only with two local JS scripts. No downloads, no external package installs declared in the skill manifest.
Credentials
The skill declares no required environment variables, credentials, or config paths. The SKILL.md and included files do not request secrets. Any later integrations (Postiz, WhatsApp, Google Reviews automation) would legitimately require credentials, but those are optional/up-sell items and are not required by this package.
Persistence & Privilege
Skill flags are default (always: false, user-invocable: true, model invocation enabled). It does not request permanent/always-on presence or system-wide config changes.
Assessment
This skill appears internally consistent and focused on generating marketing content. Before installing or running it: 1) Review the two JS scripts (generate-content-calendar.js and restaurant-hooks.js) for any outbound network calls, child_process/exec, or file-system writes you don't expect; run them in a sandbox first. 2) Be aware the SKILL.md and pricing docs describe optional integrations (Postiz, WhatsApp, Google Reviews automation) that would require API keys and external access if you enable them — only provide those keys when you trust the integration code. 3) The skill includes upsell/monetization language; the agent might suggest paid services — confirm pricing and data flows before connecting accounts. If you find network calls to unknown servers, new required env vars, or any 'always: true' privilege added, stop and re-evaluate (those would raise my concern).Like a lobster shell, security has layers — review code before you run it.
latestvk972f2g6xf6b214raccmz925r583s57y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.