Social Media Content Calendar

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent may have authority to inspect or modify local files and run shell commands while performing a task that should mainly generate marketing documents.

Why it was flagged

The skill is an instruction-only social media calendar generator, but it declares broad local file tools and Bash shell access without visible limits, approval requirements, or a clear need for shell execution.

Skill content
allowed-tools: Read, Write, Edit, Grep, Glob, Bash, WebSearch
Recommendation

Remove Bash and unnecessary read/edit/search tools, or clearly restrict them to user-selected inputs and the `output/content-calendar/` directory with explicit user approval before any broader action.