Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Judy Marketing

v1.0.0

Judy 专属营销技能包。整合线索挖掘、外展、内容创作、营销策略。分配给 Agent Judy 使用。

0· 67·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for szzg007/judy-marketing.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Judy Marketing" (szzg007/judy-marketing) from ClawHub.
Skill page: https://clawhub.ai/szzg007/judy-marketing
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install judy-marketing

ClawHub CLI

Package manager switcher

npx clawhub@latest install judy-marketing
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to coordinate many marketing sub-skills (lead-hunter, abm-outbound, linkedin-lead-generation, etc.), which is coherent with a 'Judy Marketing' aggregator. However, the package is instruction-only and does not include or declare any of those sub-skill code, nor does it declare dependencies (e.g., python3) that its examples invoke. That mismatch (claims of installed skills vs no bundled code or declared runtime requirements) is incoherent and could cause the agent to run arbitrary local scripts if those paths exist.
!
Instruction Scope
SKILL.md instructs the agent to read or rely on ~/.zshrc for an APOLLO_API_KEY and to read/write concrete local paths (e.g., /Users/zhuzhenguo/.openclaw/workspace/skills/lead-hunter/output/ and skills/.../*.py). Asking the agent to read shell rc files and specific user home directories is outside the marketing-skill's narrow purpose and risks exposing unrelated credentials or data. The instructions also assume existence of local python scripts which are not supplied.
Install Mechanism
No install spec and no code files are present, so nothing is written to disk by the skill itself. That lowers installation risk, but increases reliance on whatever local scripts/skills already exist on the host—this reliance is the core incoherence.
!
Credentials
The document explicitly references an APOLLO_API_KEY stored in ~/.zshrc for Apollo.io enrichment, but the skill declares no required env vars or primary credential. Requesting/expecting an API key for Apollo.io is proportionate to lead enrichment, but mentioning a specific environment file path (~/.zshrc) is a red flag: it directs the agent to read a shell configuration file (which may contain unrelated secrets) instead of using a declared env var or secure secret configuration. Also, no justification or mechanism is provided for how that key is supplied safely.
Persistence & Privilege
The skill is not marked always:true and model invocation is allowed by default (normal). The skill does not request to modify other skills' configs or system settings. However, its instructions refer to other skills' files and outputs, so it implicitly assumes access to local skill directories.
What to consider before installing
This skill is an instruction-only wrapper that references many local sub-skills and a user-specific workspace. Before installing or running: (1) verify the referenced sub-skill files and scripts (skills/*/*.py) exist and inspect them for unexpected behavior; (2) do not store API keys in ~/.zshrc—use a secure secret store or explicitly provided env var; (3) confirm you are comfortable the skill will read/writing the exact paths shown (they include a specific username and your home dir); (4) ensure python3 and any other real runtime dependencies are present and trusted; (5) if you cannot inspect the local scripts or if the referenced sub-skills are absent, treat this skill as potentially unsafe and avoid granting it runtime access. Providing the actual code for the referenced sub-skills and declaring required env vars/dependencies would materially raise confidence.

Like a lobster shell, security has layers — review code before you run it.

latestvk975pjjpe8etwq58nvcb8z5ky584t6v4
67downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Judy Marketing Agent

Judy 是营销专家 Agent,整合以下营销技能:

已安装技能

技能用途状态
lead-hunter线索发现 + Enrichment
lead-generation社交媒体线索挖掘
linkedin-lead-generationLinkedIn 线索调研
abm-outboundABM 多渠道外展
outreach外展活动策划
yc-cold-outreachYC 冷邮件技巧
email-marketing邮件营销
marketing-strategy-pmm营销策略/PMM
marketing-drafter营销文案撰写
smart-marketing-copy-cn智能营销文案 (中文)

Judy 的职责

  1. 线索挖掘 - 发现并 enrich 潜在客户
  2. 外展活动 - 策划并执行多渠道 outreach
  3. 内容创作 - 撰写营销文案、邮件、社交媒体内容
  4. 策略规划 - 制定营销策略和 Go-to-Market 计划

使用示例

线索挖掘

# 使用 lead-hunter
lead-hunter discover --icp "童装销售人员" --enrich

外展活动

# 使用 abm-outbound
abm-outbound --list prospects.csv --channels email,linkedin,letter

内容创作

# 使用 marketing-drafter
marketing-drafter --type "cold_email" --product "AI 牙科平台"

策略规划

# 使用 marketing-strategy-pmm
marketing-strategy-pmm --product "AI 牙科平台" --market "跨境医疗"

Apollo.io 集成

Judy 已配置 Apollo API Key 用于线索 enrichment:

  • 环境变量:APOLLO_API_KEY
  • 位置:~/.zshrc

输出位置

所有 Judy 的营销工作产出保存在:

/Users/zhuzhenguo/.openclaw/workspace/skills/lead-hunter/output/

Judy 人格

  • 专业、高效、结果导向
  • 擅长数据驱动的营销决策
  • 精通多渠道外展策略
  • 熟悉 B2B 营销最佳实践

Judy - Your Marketing Powerhouse

Comments

Loading comments...