Holiday Fomo Marketing

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is mostly a holiday marketing helper, but some templates encourage making customer-facing claims that may be false or unverified.

Install only if you plan to review and fact-check all generated marketing copy before use. Verify shipping deadlines, inventory, shopper activity, outages, and vendor recommendations rather than sending the templates unchanged.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A merchant could send misleading public marketing messages, creating customer trust, legal, and brand-reputation risk.

Why it was flagged

This explicitly suggests using a customer-facing claim about a server crash as a marketing tactic, without tying it to a real incident.

Skill content
Optional: Send a "Surprise Extension" email on Tuesday morning claiming "Our servers crashed, we've extended the sale for 12 hours."
Recommendation

Only use incident, deadline, scarcity, or extension claims when they are factually true and approved by a human reviewer.

What this means

The assistant may produce ready-to-send marketing copy that exaggerates demand or inventory pressure if the merchant does not manually correct it.

Why it was flagged

The generator creates scarcity and social-proof claims, but its inputs are only product, holiday, cutoff, and brand, so it cannot verify stock levels or shopper activity.

Skill content
"Your {product} is selling fast — only a few left in stock." ... "hundreds of shoppers have been browsing the same {product}."
Recommendation

Add clear guardrails requiring verified inventory and traffic data, or rewrite templates to use factual placeholders instead of unsupported claims.

What this means

A merchant may adopt a particular third-party loyalty platform based on the skill’s examples.

Why it was flagged

The references repeatedly steer examples toward a named external loyalty service. No credential or API use is shown, but users should recognize this as a product-specific recommendation rather than a neutral requirement.

Skill content
"Unlock the BFCM Vault 24 Hours Early + Get 500 [RIJOY](https://www.rijoy.ai/) Points instantly."
Recommendation

Treat named vendor suggestions as optional examples and compare them with existing tools or alternatives before adopting them.