ClawHub

MachFive Cold Email

v1.0.5

Generate hyper-personalized cold email sequences using AI. Turn lead data into high-converting outreach campaigns.

⭐ 4· 5.2k·14 current·14 all-time
byMachFive@bluecraft-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the behavior in SKILL.md: calls to https://app.machfive.io API endpoints to list campaigns, generate (single and batch), poll lists and export results. The single required env var (MACHFIVE_API_KEY) is appropriate and expected for this API-based capability.
✓
Instruction Scope
Runtime instructions are limited to calling the MachFive REST API, handling campaign selection, polling for batch completion, and exporting results. The skill does not instruct reading local files, other env vars, or sending data to third-party endpoints beyond MachFive. It does note long client timeouts (5–10 min) and recommends storing a default campaign ID if the user provides one.
✓
Install Mechanism
No install spec or code files — instruction-only. This minimizes installer risk (nothing is downloaded or written to disk by the skill itself).
ℹ
Credentials
Only requests MACHFIVE_API_KEY which is proportionate. However, the skill will transmit lead data (names, emails, company, LinkedIn, website) to MachFive — that can include personal data/PII, so ensure you trust MachFive and that sending those leads complies with privacy/consent rules for your use case.
✓
Persistence & Privilege
always is false and the skill does not request system-wide persistence or modify other skills. It does allow storing a default campaign ID for convenience (agent-local configuration) which is reasonable.
Assessment
This skill is coherent: it only needs an API key to call MachFive's endpoints and the SKILL.md describes those calls. Before installing, confirm you trust MachFive (the skill transmits lead data including emails/LinkedIn/companies) and that sending that data complies with your privacy and consent obligations. Because the skill's source and homepage are absent, consider verifying the publisher or obtaining the API key from your own MachFive account rather than sharing credentials elsewhere. If you prefer tighter control, avoid storing a default campaign ID globally and rotate/revoke the MACHFIVE_API_KEY if you stop using the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk9723s34wsw68k1xgcp4xzgnkh80k8c4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMACHFIVE_API_KEY

Comments