Builds complete multi-channel revenue funnels adapted to any business model. Combines proven frameworks from elite operators: Yomi Denzel's viral top-of-funn...
Security Analysis
high confidenceThe skill's files, instructions, and required access are coherent with a multi-channel funnel builder: it reads/writes workspace funnel files and optionally uses a Telegram bot for distribution; nothing requested is disproportionate to that purpose.
Name/description (multi-channel funnel builder) align with what the skill does: templates for landing pages, email sequences, funnel configs, niche research and channel strategies. Declared required skills (acquisition-master, content-creator) and workspace config paths match the stated capability. Network access to public sites for niche research (Reddit, X, YouTube) is expected for niche validation.
SKILL.md explicitly instructs reading and writing specific workspace paths (/workspace/funnel/config.json, /workspace/funnel/active/, /workspace/.learnings/LEARNINGS.md and creating /workspace/AUDIT.md) — this is reasonable for generating and persisting funnels. It also instructs making public web requests for niche signals and explicitly names the Telegram Bot API as a target. That means the agent can post messages externally via Telegram — expected for distribution/alerts, but worth noting because it grants an outward channel.
Instruction-only skill with no install spec and no code files to execute. This minimizes disk-write/third-party install risk — nothing is downloaded or installed by the skill itself.
Only two environment variables are declared: TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID. Those are proportionate if the skill is expected to post or notify via Telegram. However, a Telegram bot token is a sensitive credential that can be used to send arbitrary messages to chats the bot can access, so granting it gives the skill an external exfiltration/posting channel. No unrelated credentials (AWS, Stripe keys, etc.) are requested.
always:false and user-invocable:true. The skill does not request permanent platform-wide inclusion or other skills' configs. It reads/writes only its own workspace paths and does not declare changes to other skills or global agent settings.
Guidance
This skill appears to do what it says: generate funnels, landing pages, and email sequences and to research niches on public sites. Before installing: (1) Be aware it requests a Telegram bot token and chat id — only provide a bot with the minimal permissions and a chat ID you control (a compromised token could let the skill post externally). (2) The skill will read/write files under /workspace/funnel and /workspace/.learnings — run it in an isolated workspace or review generated files before publishing. (3) The templates include trading-signal language and pricing/guarantee templates — if you plan to use them for financial or regulated products, ensure you comply with relevant laws and disclaimers. (4) Because the skill can make outbound HTTP requests, avoid supplying any credentials you do not trust it with; if you need notifications, consider using a dedicated, limited-scope bot account. Overall the requested access is coherent, but exercise normal caution with the Telegram token and with any real-money or regulated funnels produced.
Latest Release
v1.0.3
- Removed the _meta.json file from the project. - No changes to core functionality or documentation. - Version incremented to 1.0.3 to reflect this file removal.
More by @georges91560
Published by @georges91560 on ClawHub
