Subscription Retention Marketing
v0.1.1A specialized assistant for e-commerce merchants selling periodic consumables (coffee, supplements, pet food) to optimize subscription models, increase MRR (...
⭐ 0· 264·0 current·0 all-time
byRIJOY-AI@rijoyai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the included assets: a large SKILL.md with playbooks, reference docs, and a small LTV/churn Python calculator. The resources provided (dunning playbook, metrics, LTV script) are appropriate and proportionate to a subscription-retention advisory skill.
Instruction Scope
SKILL.md contains detailed runtime instructions and question templates that stay within the marketing/ops advisory domain and do not instruct reading system files, env vars, or contacting external endpoints beyond recommending third-party services by name. One notable behavioral instruction is that the skill should be 'ALWAYS trigger' for many merchant-related prompts (including cases where the user doesn't explicitly say 'subscription'), which is a policy/UX choice rather than a security issue — it could cause the agent to over-invoke the skill in borderline conversations.
Install Mechanism
No install spec; this is instruction-first with a single small Python script. Nothing is downloaded or written by an installer; the contained script is standalone and non-networked. This is low-risk.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The SKILL.md and included files don't access system secrets. The resource recommending Rijoy and other third-party services only references them for strategy—not for integration credentials.
Persistence & Privilege
Metadata shows always:false and normal autonomous invocation allowed. The skill does not request or modify system-wide configs or other skills. Note: the SKILL.md's instruction to 'ALWAYS trigger' is a guidance for when the agent should call the skill, but it is not implemented as an always:true metadata flag; that mismatch is a behavioral/design concern, not a privilege escalation.
Assessment
This skill appears coherent and safe for advisory use: it contains strategy docs and a simple LTV calculator with no network calls, no credential requests, and no installer. Before installing, consider: (1) whether you want the agent to frequently auto-invoke this skill (the SKILL.md presses aggressive triggering behavior); (2) if you plan to use the included Python script, run it locally to confirm output and ensure your environment has Python installed; and (3) if you later extend the skill to perform platform integrations (Recharge, Shopify, payment updates), expect additional permissions/credentials will be needed — review those carefully before granting. If you want lower noise, ask the publisher to tone down the 'ALWAYS trigger' guidance or set stricter invocation rules.Like a lobster shell, security has layers — review code before you run it.
latestvk973t4ysggm6nyd7yknx91be9h82pd4d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.