Marketing Mode

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a prompt-only marketing assistant, with the main item to notice being metadata that references a Node/npm package outside the reviewed files.

This skill is generally coherent for marketing help. Before installing, note that the visible reviewed files are prompt/instruction content, while the metadata also mentions a global npm package; verify that package if you choose that install route.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If you install through the npm path, you may be trusting package code that was not part of these reviewed artifacts.

Why it was flagged

The reviewed package is described as instruction-only with no code files, but the metadata points to an external npm install path and Node/npm requirements. That external package content is not represented in the provided files.

Skill content

"install": { "npm": "npm install -g @thesethrose/marketing-mode" }, ... "requires": { "node": true, "npm": true }

Recommendation

Use the registry skill install if that is sufficient, and verify the npm package and repository before installing it globally.