Back to skill
v1.0.0
Marketing Mode
BenignClawScan verdict for this skill. Analyzed May 1, 2026, 4:51 AM.
Analysis
This appears to be a prompt-only marketing assistant, with the main item to notice being metadata that references a Node/npm package outside the reviewed files.
GuidanceThis skill is generally coherent for marketing help. Before installing, note that the visible reviewed files are prompt/instruction content, while the metadata also mentions a global npm package; verify that package if you choose that install route.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Abnormal behavior control
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Agentic Supply Chain Vulnerabilities
SeverityLowConfidenceHighStatusNote
skill.json
"install": { "npm": "npm install -g @thesethrose/marketing-mode" }, ... "requires": { "node": true, "npm": true }The reviewed package is described as instruction-only with no code files, but the metadata points to an external npm install path and Node/npm requirements. That external package content is not represented in the provided files.
User impactIf you install through the npm path, you may be trusting package code that was not part of these reviewed artifacts.
RecommendationUse the registry skill install if that is sufficient, and verify the npm package and repository before installing it globally.
