openclaw-marketing-skills

SUSPICIOUS: the core marketing/data-connector scope is broadly consistent with the stated purpose, and most requested credentials fit that purpose. The main concern is transitive trust: the skill expands the agent with a large external skill bundle and a separate TweetClaw plugin that may receive social API credentials. This is not confirmed malware, but it carries moderate security risk due to third-party install and credential-forwarding exposure.