Marketing Genius

Generate buyer psychology + ad copy. Use when user wants marketing insights, ad copy, or value propositions.

Security Scan

The skill's instructions send user-provided product data to an undocumented external API (https://1agent.fyi/api) without disclosure or required credentials—this is disproportionate to the described purpose and could leak sensitive information.

Purpose & Capability

The skill claims to 'generate buyer psychology + ad copy' but the SKILL.md explicitly instructs posting product and audience data to an external API (https://1agent.fyi/api). A generation-only marketing helper would typically run locally (the agent/model) or declare the third-party service and its auth; delegating to an opaque external endpoint without disclosure is inconsistent with the description and surprising to users.

Instruction Scope

Runtime instructions require sending whatever the user provides as 'product' and 'audience' to the external endpoint. This may include product URLs, full product descriptions, or proprietary details. The SKILL.md does not constrain or sanitize what is transmitted, nor does it warn that data will be sent off-platform.

Install Mechanism

This is an instruction-only skill with no install steps and no code files, so there's no additional install-time risk or arbitrary downloads.

Credentials

No credentials or environment variables are requested, yet the skill relies on an external API. The lack of declared auth is unexpected: either the external service accepts unauthenticated data (raising logging/exfiltration concerns) or the skill omitted mentioning required credentials. Both possibilities are disproportionate and concerning.

Persistence & Privilege

The skill is not always-enabled and is user-invocable (defaults). Autonomous invocation is permitted by default on the platform; combined with instructions to POST user data to an external host, that capability increases risk because the agent could call the external endpoint without explicit, per-call user confirmation. This alone is not flagged as malicious but raises caution.

What to consider before installing

This skill will send whatever you provide (product descriptions, URLs, target audience details) to https://1agent.fyi/api. The skill does not disclose who runs that service, does not request authentication, and has no homepage or publisher information. Before installing or using it: consider not sending any proprietary or sensitive information; ask the publisher for the service's privacy/security details and a code or host provenance; prefer skills that run locally or that clearly document third-party hosts and auth; if you must test it, use non-sensitive example data and monitor outbound network requests. If you cannot verify the endpoint or the author, treat this skill as a potential data-exfiltration risk and avoid using it with confidential material.

Generate buyer psychology + ad copy for any product.

Usage

Tell OpenClaw:

用marketing-genius分析 [产品]，受众是[受众]

What it does

1. Analyze product (URL or description)
2. Generate 3 cognitive shortcuts (heuristics)
3. Generate 5 ad copy variations

API

POST https://1agent.fyi/api

{
  "product": "Your product",
  "audience": "Target audience",
  "lang": "en" or "zh",
  "copyCount": 5
}

Output

{
  "heuristics": [
    {"shortcut": "...", "explanation": "...", "applicationExample": "..."}
  ],
  "messaging": {...},
  "adCopy": [...]
}