AgentReach

Provides Twitter outreach templates, automated deployment scripts, AI agent DM lists, and guides to scale OpenClaw skill promotion and monetization.

Security Scan

The skill is an instruction-only marketing/outreach kit whose files and small publish script match its description and do not request unrelated credentials or installs.

Purpose & Capability

Name/description (Twitter/X templates, publish scripts, DM lists, bounty guide) match the included files (threads, dm-lists, guides, publish script). The included clawhub publish script is appropriate for automated ClawHub publishing; nothing in metadata requests unrelated cloud or system access.

Instruction Scope

SKILL.md and bundled files instruct local actions (unzip, run publish script, copy-paste DMs). They do not read system files or env vars. Note: the DM list and advice to mass outreach / automated DMs can be abused (spam, platform policy violations). The bounty guide references spawning subagents and payouts (Stripe/CashApp) — these are procedural recommendations, not hidden credential access, but could lead to financial operations if followed without safeguards.

Install Mechanism

No install spec; instruction-only skill. The only script is a small bash wrapper that runs the clawhub CLI. Nothing is downloaded from third-party URLs during installation by the skill itself.

Credentials

No required env vars, no primary credential, and no config paths requested. References to Stripe/CashApp/Gumroad are informational; the package does not request related secrets.

Persistence & Privilege

always is false and the skill doesn’t request system persistence or modify other skills. It can be invoked by the agent (default) which is expected for an instruction skill; this is not by itself a concern.

Assessment

This package appears to be exactly a promotional kit (templates, a tiny publish script, DM lists, and a bounty guide). Before using it: 1) Inspect the publish script (and any other scripts) to confirm they do only what you expect — the included script simply runs `clawhub publish` but you should verify the target directory and metadata arguments. 2) Be careful about automated or bulk DMs: mass unsolicited outreach can violate X/Twitter policies and cause account suspension or reputational harm. 3) The bounty guide mentions payments (Stripe/CashApp) and spawning subagents — don’t automate payouts or commit funds without explicit safeguards and review of payment flows. 4) The SKILL.md contains a Gumroad link and references a paid kit; ensure you are not republishing paid content or violating licensing. 5) Practice least privilege: run publish commands from a user account you control and double-check the skill folder contents before publishing. Overall the skill is coherent with its stated purpose, but exercise caution around outreach automation and money-related steps.

AI Reach Kit 🎯

Ship faster, reach further.

Contents

• x-threads/: Twitter promo templates
• scripts/publish-to-clawhub.sh: 1-click skill deploys
• dm-lists/ai-agents.txt: Outreach targets
• guides/bounty-hunters.md: Monetize open issues

Usage

clawhub install achilles/ai-reach-kit
unzip ai-reach-kit.zip
./scripts/publish-to-clawhub.sh your-skill-folder

Gumroad: Buy full kit | ZIP: Included post-install

Build in public. 💥 #OpenClaw