Agent Economy Report

Skill code audit

SAFE version 0.1.0 · audited 2026-09-17

copywriting @jk-0001

This package is a text-only copywriting playbook. It explains formulas such as AIDA, PAS, and FAB and gives examples for headlines, CTAs, emails, ads, sales pages, and landing pages. The provided files contain no executable code, shell commands, network calls, file reads or writes, credential access, payment handling, or persistence. The only URLs are static publisher and reference links to clawhub.ai in metadata. No prompt-injection or rule-override instructions were found. Verdict: SAFE.

Declared purposeWrite persuasive copy for landing pages, emails, ads, sales pages, and marketing materials; provide copywriting frameworks and guidance.
Observed behaviorThe skill consists of markdown guidance and examples. It describes copywriting formulas, headline writing, CTAs, emotional triggers, objection handling, proof, and A/B testing. No runtime behavior, executable code, file operations, or network access is present.
Verdict, rules onlySAFE
Verdict, AISAFE
Final verdictSAFE (never better than either pass)

Capabilities

capabilityvs purposedetail
otherneededText generation and editing guidance only; no runtime system capabilities requested or exercised.

Findings

severityfinding
infoDeclared purpose
The front matter describes the skill as a copywriting guide, matching the observed markdown content.
SKILL.md:3 Write persuasive copy for landing pages, emails, ads, sales pages, and marketing materials. Use when you need to write headlines, CTAs, product descriptions, ad
infoStatic external link
The only domain present is a static publisher/profile link. No code in the package fetches this URL.
skill-card.md:9 [jk-0001](https://clawhub.ai/user/jk-0001)
infoReference link
A metadata reference link to the skill listing. It is not executed by the skill.
skill-card.md:34 - [Copywriting skill on ClawHub](https://clawhub.ai/jk-0001/skills/copywriting)
infoNo executable output
The skill card states the output includes no executable code, shell commands, credential access, or persistence. This matches the provided files.
skill-card.md:44 **Other Properties Related to Output:** [No executable code, shell commands, credential access, or persistence are part of the artifact.]

0 AI finding(s) were dropped because their file, line or quote did not match the package.

Network destinations in the code

domainservice ratingwhere
clawhub.ainot in the service indexskill-card.md:9

Other facts

Binaries invokednone
Environment variables readnone
Hard-coded walletsnone
Pipes a download to a shell0
eval / exec / subprocess0
base64 blobs0
File writes0
Persistence0

Files audited

filelinessha256
SKILL.md2244d89ce0eaad0184f…
_meta.json66f8c495834772681…
skill-card.md525350c868488ce417…

For agents

JSON: https://agenteconomy.report/k/copywriting.audit.json · badge: https://agenteconomy.report/k/copywriting.audited.svg · skill rating: /k/copywriting · commission an audit of any skill: US$ 29 per version.

How this is computed

The complete published package of this exact version was downloaded from the registry and read statically; nothing was executed. A deterministic pass extracts network destinations, binaries, environment variables, writes, install commands, obfuscation markers, subprocesses and wallets, each with file and line. An AI then reads the whole package with those facts and writes the summary, the capabilities and the findings under a strict schema; every finding it produces must cite a file, a line and the exact text, or it is dropped. The final verdict is the worst of the two passes. The audit does not change the skill's trust tier (policy); the author may respond through the dispute channel and the response is published here. Commissioned by: the Agent Economy Report (free program: the 150 most downloaded skills, September 2026).