Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Email Marketing Tool

自动化管理模板和联系人,支持批量发送、效果追踪及A/B测试,实现精细化邮件营销和数据分析。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 27 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The description and SKILL.md describe a full email marketing tool (SMTP, SendGrid, Mailgun, 阿里云, 腾讯邮件) that requires credentials and integration logic, but the skill declares no required environment variables, no config paths, and no install. _meta.json lists Python requirements (smtplib, pandas) even though there is no code or install step. This mismatch suggests the manifest is incomplete or the skill will need external secrets/config that are not requested.
Instruction Scope
SKILL.md contains high-level commands referencing local files (customers.csv, template.html) and actions that would send bulk email and perform A/B tests. Those file reads are consistent with the stated purpose, but the instructions are vague (no steps for authentication, no endpoints or API call formats, no safeguards such as dry-run or confirmation before sending). That grants broad discretion to an agent without clear bounds.
Install Mechanism
There is no install spec (instruction-only), which reduces risk of arbitrary code being downloaded. However, _meta.json lists runtime requirements (smtplib, pandas) which implies expected Python code that is not present — an inconsistency to clarify (either provide code/install or remove the requirements).
!
Credentials
SKILL.md claims integration with third-party mail services but the skill requests no environment variables or credentials (e.g., SENDGRID_API_KEY, MAILGUN_API_KEY, SMTP_USER/PASSWORD). Requiring zero credentials for those capabilities is unrealistic and disproportionate. This gap could lead the agent to prompt interactively for secrets or to attempt unsafe defaults.
Persistence & Privilege
always is false and there are no install steps that grant persistent system-wide privileges. The skill does not request permanent presence or modify other skills' configs. Normal autonomous invocation is allowed (platform default).
What to consider before installing
This skill describes a full email-marketing service but is missing key pieces. Before installing or using it, ask the author to: (1) provide the implementation or install instructions (there is currently only SKILL.md and _meta.json), (2) list exactly which environment variables or credentials it needs (SendGrid/Mailgun/API keys or SMTP user/password) and how those are stored/used, (3) provide a homepage or source repository and a verified author identity, (4) explain safeguards (dry-run, confirmation prompts, unsubscribe handling, rate limits) and privacy protections for customers.csv and templates. Do not let the skill send real emails until you can review the actual code or a trustworthy connector and confirm API keys will not be exfiltrated. If you accept it despite missing details, test only in a sandbox with test addresses and revoke any test keys afterward.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9741esabegfgsfqybgcf3s0bs83v3t7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Email Marketing Tool - 邮件营销自动化

功能描述

邮件营销自动化工具,支持批量发送、模板管理、效果追踪。

使用场景

  • 营销邮件批量发送
  • 客户关怀邮件
  • 产品推广邮件
  • 活动邀请邮件
  • 订阅通讯发送
  • 邮件 A/B 测试

命令

批量发送

发送邮件 列表=customers.csv 模板=promo.html 主题=限时优惠

模板管理

创建邮件模板 名称=欢迎邮件 内容=template.html 变量=name,product

效果追踪

获取邮件统计 活动 ID=campaign001 指标=打开率,点击率,退订率

A/B 测试

A/B 测试邮件 版本 A=template_a.html 版本 B=template_b.html 样本=10%

列表管理

管理邮件列表 文件=customers.csv 操作=去重,验证,分段

功能模块

  • 邮件模板
  • 联系人管理
  • 批量发送
  • 效果分析
  • A/B 测试
  • 自动跟进
  • 退订管理

支持服务

  • SMTP 服务
  • SendGrid
  • Mailgun
  • 阿里云邮件
  • 腾讯邮件

输出报告

  • 发送统计
  • 打开率分析
  • 点击率分析
  • 转化追踪

特性

  • 批量发送
  • 个性化内容
  • 定时发送
  • 效果追踪
  • 自动优化

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…