Public Relations Manager

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This PR assistant is coherent and purpose-aligned, with the main cautions being optional external package installation and careful handling of journalist contact data.

This looks suitable as a PR content and campaign-planning assistant. Before installing the optional Python package, verify the PyPI/GitHub source, and before using generated pitches or press releases, review them for accuracy, confidentiality, and appropriateness.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user follows these setup commands, they may install and run code from PyPI or GitHub that is not included in this artifact review.

Why it was flagged

The documentation tells users how to install external package/source code, while the submitted artifact set itself contains no code or install spec. This appears user-directed and purpose-aligned, but the external package is outside the provided scanned artifacts.

Skill content
pip install openclaw-public-relations-manager ... git clone https://github.com/ZhenRobotics/openclaw-public-relations-manager ... pip install -e .
Recommendation

Install only from trusted sources, verify the package/repository and version, and consider reviewing the package contents before use.

What this means

Incorrect, stale, or overly detailed contact/history data could lead to inappropriate outreach or accidental disclosure of relationship notes.

Why it was flagged

The skill uses journalist contact details and prior interaction data to score matches and personalize outreach. That is expected for a PR assistant, but such records can be sensitive and should not be over-trusted or reused carelessly.

Skill content
Relationship (15%): Response rate + interaction history ... Profiles with beat coverage, contact info, response rates
Recommendation

Keep media-contact data scoped, accurate, and appropriate for reuse, and review generated pitches before sending them externally.