Insufficient Evidencenot manually reviewedcatalog importevidence: source-scanned

cold-email

Generate hyper-personalized cold email sequences using AI. Turn lead data into high-converting outreach campaigns.

45
overall score
Publisher
Version
source-scanned
Updated
2026-03-15
Tags
marketing-and-salesawesome-indexcatalog-only

Source-aware scan found higher-privilege capability areas (email), but that alone is not evidence of malicious behavior.

Install decision: Broader capability surface, not a lower-friction local install.
Caution signal
Privileged but not suspicious by default
Review state
Static analysis only
Evidence points
25
Capability surface
4 capability signals
evidence snapshotnot tested yetnot tested yetno manual review yetsource-scanned evidence
Top row only: current live test result, deeper follow-on result, review presence, and evidence level. Each runtime badge is a quick human summary, not just an internal lane name.

✉️ Quick review

No runtime postcard yet for this skill. Static evidence is available below, but the runtime lane has not touched it yet.

Evidence strengthStronger evidence: source-level scan available
Evidence basisSource-aware static scan of the upstream skill repo
Current runtime resultNo live runtime receipt yet, so the page is still relying on static evidence only.

Before you install

✅ Good fit if...
  • You are specifically looking for marketing-and-sales / awesome-index workflows.
🧰 Before you install...
  • Expect setup work: this skill references 12 env vars.
  • Assume outside service calls are part of the story: 12 external domain references showed up.
  • There is no runtime row on record yet, so static evidence is doing more of the work here.
⚠️ Watch out for...
  • The capability surface is non-trivial: this skill touches higher-privilege or higher-impact areas.
  • No runtime verdict yet, so you are leaning harder on static evidence and documentation quality.

Why this label

This landed in Insufficient Evidence because the imported entry still does not have enough direct proof to justify a stronger trust call.

Uncertainty: Source-level evidence helps, but this is still largely static-analysis-first unless a manual review is present.

Evidence strengthStronger evidence: source-level scan available
Suspicious signals0
Higher-impact signals1
Env / secret refs12
Network refs12
Shell signals0

Capability surface and suspicious signals

Capability surface

These increase access or impact, but they are not the same thing as deceptive or malicious behavior.

env vars: 12external refs: 12no shell signals detectedfile write signalshigher-impact domains

Capability summary

Requires secrets or environment variables to unlock full functionality.References external services or network endpoints.Contains signs of writing, publishing, or persisting output.
+ 1 more
Touches higher-impact domains like messaging, credentials, finance, or posting.

Suspicious behaviors

These are the signals that count much more heavily against the score.

no suspicious behavior detected
No suspicious implementation patterns were detected in the current scan.

Evidence

Env vars
BAD_REQUESTCSVCTA
+ 9 more
FORBIDDENGETINSUFFICIENT_CREDITSMACHFIVE_API_KEYNOT_FOUNDNOT_READYPOSTUNAUTHORIZEDURL
Domains
acme.comapp.machfive.io/api/v1/campaignsapp.machfive.io/api/v1/campaigns/{campaign_id}/generate
+ 9 more
app.machfive.io/api/v1/campaigns/{campaign_id}/generate-batchapp.machfive.io/api/v1/listsapp.machfive.io/api/v1/lists/{list_id}app.machfive.io/api/v1/lists/{list_id}/export?format=csvapp.machfive.io/api/v1/lists/{list_id}/export?format=jsonapp.machfive.io/api/v1/lists?campaign_id={campaign_id}&status=completed&limit=20app.machfive.io/campaignsapp.machfive.io/settingsgithub.com/clawdbot/skills/commit/7e7f01ac32d0ed2d31b9b59b1279bc3a8c3db1b9
Binaries
gh
Shell signals
None detected
Suspicious
None detected

Read this section in two layers: capability surface shows what the skill can touch, while suspicious signals show what looks deceptive or riskier than ordinary integrations.

🧪 Technical runtime details

No runtime suite recorded yet for this skill.

Publisher and provenance

Listed in the VoltAgent awesome-openclaw-skills catalog under Marketing And Sales and lightly source-scanned from openclaw/skills. This is stronger evidence than catalog metadata alone, but still not a full runtime audit.

Source type: awesome-index

Source path: https://github.com/openclaw/skills/tree/main/skills/bluecraft-ai/cold-email/SKILL.md

Source URL: https://github.com/openclaw/skills/tree/main/skills/bluecraft-ai/cold-email/SKILL.md

Discovery category: Marketing And Sales

Manual review

No human review yet. The scorecard is currently static-analysis-first.

Community signals

Community signals

These are community attention markers, not crowd-sourced truth. Click what feels especially worth flagging or reviewing.

Related skills