Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Email Capture Generator
v1.0.1Build high-converting lead magnets, squeeze pages, and email capture funnels using proven 5-section conversion frameworks. Includes opt-in forms, thank you p...
⭐ 0· 548·0 current·0 all-time
byCameron Jo'van@cameron-jovan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the provided content: SKILL.md, examples, and an HTML squeeze-page template all focus on building opt-in landing pages and lead magnets. No unexpected binaries, credentials, or installs are requested.
Instruction Scope
Instructions confine the agent to generating landing pages using a 5-section framework and replacing template placeholders. However, there are minor inconsistencies: the HTML template uses placeholders not listed in the Template Variables table (e.g., {{FORM_ACTION}}, {{VALUE_IMAGE}}, {{COUNTDOWN_DATE}} conditional, and additional benefit variables like BENEFIT_4/BENEFIT_5 in examples). These gaps are documentation issues but relevant because {{FORM_ACTION}} controls where submitted emails are sent — you should ensure any form action is set to a trusted email provider/webhook before deploying.
Install Mechanism
Instruction-only skill with no install spec and no code files to execute. This is low-risk from an install/execution perspective.
Credentials
The skill declares no required environment variables, credentials, or config paths. It does not request access to unrelated services or secrets.
Persistence & Privilege
always is false and the skill is user-invocable only. There is no requested persistent presence or modification of other skills or system-wide settings.
Assessment
This skill appears to do what it says: generate email-capture pages using a standard 5-section template. Before using it in production, verify a few things: (1) The template contains placeholders not documented in the SKILL.md (notably {{FORM_ACTION}}, {{VALUE_IMAGE}}, and COUNTDOWN_DATE conditional). Make sure you (or the agent under explicit instruction) set {{FORM_ACTION}} to a trusted endpoint (your email provider, autoresponder, or webhook) — otherwise form submissions could be sent to an unexpected third-party. (2) Examples reference BENEFIT_4/BENEFIT_5 though the variables table only lists three benefits; confirm which variables you must supply. (3) Check that privacy/terms links and testimonials used are accurate and lawful for your audience. If you need the agent to auto-fill form action endpoints or publish pages, require explicit user approval for any external endpoint or credential use. These are documentation/usability issues rather than signs of malicious behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk979nyr79yzyb93zm8ax8s8p2n81t8je
License
MIT-0
Free to use, modify, and redistribute. No attribution required.