Access 23 marketing modules offering checklists, frameworks, and ready-to-use deliverables for CRO, SEO, copywriting, analytics, launches, ads, and social me...
Security Analysis
high confidenceThis is an instruction-only marketing playbook (23 modules) that does not request credentials, install software, or perform any system actions — its requirements and content are coherent with its stated purpose.
The skill is a library of marketing modules (CRO, SEO, copy, analytics, ads, launches, etc.) and only contains guidance files under references/. It declares no env vars, binaries, config paths, or installs — consistent with being a documentation/playbook skill. The SKILL.md notes the content is vendored from a GitHub repo (coreyhaines31/marketingskills); provenance/licensing is not provided in metadata and should be checked if that matters to you.
Runtime instructions are simply: pick a module and apply the framework. Module files contain prescriptive guidance and example code snippets (e.g., GA4/gtag/dataLayer, GTM snippets) intended as copy/paste examples. The instructions do not ask the agent to read system files, access environment variables, call external endpoints, or exfiltrate data.
No install spec and no code files — instruction-only. Nothing will be downloaded or written to disk by the skill itself, which minimizes install risk.
The skill requests no credentials, secrets, or config paths. Example analytics snippets reference typical third-party tools (GA4, GTM) but the skill itself does not require keys or tokens.
always is false and the skill is user-invocable. disable-model-invocation is false (the platform default), which is expected for a skill intended to be used by the agent — there is no evidence the skill attempts to modify other skills or system-wide agent settings.
Guidance
This skill appears internally consistent and is primarily a packaged set of marketing playbooks. Before installing, consider: 1) Provenance & licensing — the SKILL.md says content was vendored from coreyhaines31/marketingskills but the package metadata has no homepage; verify licensing/copyright if you’ll redistribute or rely on it. 2) Analytics/code snippets — several modules include GA4/GTM JavaScript examples; do not copy/paste those into production unchanged, avoid sending PII, and ensure consent/compliance (GDPR/CCPA) and testing in staging. 3) Competitor claims & legal risk — the competitor-comparison guidance encourages honesty, but verify any factual claims before publishing. 4) Operational caution — the skill can be invoked by the agent (normal behavior); if you prefer manual use only, disable autonomous invocation in your agent settings. Overall, no credentials or system access are requested, and there are no hidden endpoints or install steps in this package.
Latest Release
v0.1.2
Add TL;DR summary to description + Summary section at top of SKILL.md (storefront-friendly).
More by @jchopard69
Published by @jchopard69 on ClawHub
