← Back to Skills Marketplace
mhmalvi

Newsletter Automation

by Muhammad H.M. Alvi · GitHub ↗ · v1.0.1
linuxdarwinwin32 ✓ Security Clean
409
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install newsletter-automation
Description
Complete newsletter management system with subscriber signup (double opt-in), automated welcome drip sequence, broadcast sender, and subscriber analytics. 4...
Usage Guidance
This skill appears to be what it says: a set of n8n workflows using Google Sheets and SMTP. Before installing, ensure you: 1) self-host n8n (or run it in a trusted environment) and secure its instance with HTTPS and access controls; 2) provision and store Google OAuth and SMTP credentials in n8n (these are required but managed by n8n, not the skill); 3) set a strong NEWSLETTER_SECRET (avoid defaults) and protect the broadcast webhook endpoint (use HTTPS, IP restrictions or additional auth if possible); 4) consider replacing Math.random token generation with a cryptographically secure token generator if you need stronger guarantees; 5) verify SMTP provider sending limits and unsubscribe handling to avoid deliverability or compliance issues (CAN-SPAM/GDPR); and 6) test workflows thoroughly with a small list before sending broadcasts to real subscribers.
Capability Analysis
Type: OpenClaw Skill Name: newsletter-automation Version: 1.0.1 The OpenClaw AgentSkills skill bundle for newsletter automation is benign. All workflows (subscriber signup, welcome drip, broadcast sender, analytics) are clearly aligned with the stated purpose of managing a newsletter using n8n and Google Sheets. The skill appropriately uses required credentials (Google Sheets, SMTP) and environment variables (NEWSLETTER_ADMIN_EMAIL, NEWSLETTER_BASE_URL, NEWSLETTER_SECRET) for its functionality. The `SKILL.md` documentation provides clear instructions without any evidence of prompt injection attempts against the agent. There are no indicators of intentional harmful behavior such as data exfiltration, unauthorized execution, persistence mechanisms, or obfuscation.
Capability Assessment
Purpose & Capability
Name/description (newsletter automation) match the delivered artifacts: four n8n workflows for signup, drip, broadcast, and analytics. Declared n8n credentials (Google Sheets OAuth2 and SMTP) and the three env vars map to the documented functionality.
Instruction Scope
SKILL.md and the included workflows limit actions to webhook handling, Sheets I/O, and SMTP sending — all within the newsletter use case. Minor implementation notes: confirmation tokens are generated with Math.random (not cryptographically strong), and the broadcast webhook authenticates via a shared secret passed in the request body (ENV fallback to a default string is present). These are operational security considerations but do not contradict the stated purpose.
Install Mechanism
Instruction-only skill with no install spec or downloaded artifacts; no code is written to disk by the skill itself. This is the lowest-risk install model and consistent with the workflow-import approach.
Credentials
Requires three env vars (admin email, base URL, broadcast secret) which are appropriate and documented. n8n credentials (Google Sheets OAuth2 and SMTP) are required by the workflows; while these are not env vars, they are expected and justified for the integration. No unrelated credentials or system paths are requested.
Persistence & Privilege
Skill is not always-enabled, does not request system privilege, and contains no install-time hooks. Workflows run inside n8n and rely on n8n-stored credentials; there is no attempt to modify other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install newsletter-automation
  3. After installation, invoke the skill by name or use /newsletter-automation
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fix: declare all env vars used in workflows in requires.env metadata for security scan compliance
v1.0.0
- Initial public release of the newsletter-automation skill. - Provides a complete, production-ready newsletter management system using n8n and Google Sheets. - Features double opt-in subscriber signup, automated welcome drip sequence, broadcast sender, and daily subscriber analytics. - Includes four ready-to-import n8n workflows for signup, drip emails, broadcasts, and analytics reports. - Supports Google Sheets as the backend and requires Google Sheets OAuth2 and SMTP credentials for full functionality.
Metadata
Slug newsletter-automation
Version 1.0.1
License
All-time Installs 2
Active Installs 2
Total Versions 2
Frequently Asked Questions

What is Newsletter Automation?

Complete newsletter management system with subscriber signup (double opt-in), automated welcome drip sequence, broadcast sender, and subscriber analytics. 4... It is an AI Agent Skill for Claude Code / OpenClaw, with 409 downloads so far.

How do I install Newsletter Automation?

Run "/install newsletter-automation" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Newsletter Automation free?

Yes, Newsletter Automation is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Newsletter Automation support?

Newsletter Automation is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).

Who created Newsletter Automation?

It is built and maintained by Muhammad H.M. Alvi (@mhmalvi); the current version is v1.0.1.

💬 Comments