Dropship Product Pipeline

End-to-end dropship product lifecycle pipeline. CJ Dropshipping sourcing → margin check → Flux Kontext AI hero image → WooCommerce publish → CJ supplier mapp...

Security Scan

The skill's instructions and required credentials line up with a dropshipping pipeline, but there are important inconsistencies and missing pieces (no code or install spec, registry metadata omits the env/binaries listed in SKILL.md) that make it unclear what you would actually run or where sensitive data would go.

Purpose & Capability

The SKILL.md describes CJ Dropshipping → image generation (Flux Kontext / OpenAI) → WooCommerce/WordPress publishing which coherently requires CJ, FAL/OPENAI, WooCommerce, and WP credentials. However, the registry metadata above the SKILL.md lists no required env vars or binaries while SKILL.md lists many — this mismatch is unexpected and reduces trust.

Instruction Scope

The instructions tell the agent/user to run node scripts (node scripts/pipeline.js) that are not included in the skill bundle. The pipeline will send real CJ product photos to third-party image-generation services (Flux Kontext and OpenAI) and will publish to WooCommerce/WordPress. That’s consistent with the stated purpose but raises data-exfiltration and privacy considerations — product images and product metadata will be transmitted to external AI services. The SKILL.md also references a local cj-supplier-selection.json file and writing pipeline-result-{slug}.json, so you must review any script that implements those behaviors before running.

Install Mechanism

No install spec (instruction-only) reduces installation risk. However, the skill requires node and an unspecified scripts/pipeline.js that is not provided in the bundle — the instructions assume you have or will place code on disk. That gap is suspicious: either the skill is only documentation for a separate code repo, or it expects you to obtain/run external code not reviewed here.

Credentials

The SKILL.md requests multiple secrets (FAL_KEY, OPENAI_API_KEY, CJ_ACCESS_TOKEN, WOO_URL/WOO_KEY/WOO_SECRET, WP_URL/WP_USER/WP_APP_PASS) that are proportional to the described pipeline. Requiring both Flux Kontext and OpenAI keys is explained (primary + fallback). The registry metadata's omission of these env vars is an inconsistency to resolve before trusting the skill. Ensure keys are scoped/limited (read-only or limited-scope API keys) where possible.

Persistence & Privilege

The skill does not request always:true and has no install that would grant persistent privileged presence. The SKILL.md indicates outputs written to local files (hero-*.jpg, pipeline-result-*.json) which is normal for a pipeline. There is no evidence here the skill modifies other skills or system-wide agent settings.

What to consider before installing

Do not run unknown node scripts referenced by this SKILL.md without inspecting them first. The SKILL.md lists many secrets (CJ, WooCommerce, WordPress, Flux Kontext, OpenAI) and will transmit product photos/metadata to external AI services — consider privacy and IP implications. Resolve the metadata mismatch: the registry claims no required envs/binaries but SKILL.md requires node and many keys. Ask the publisher for the pipeline code (scripts/pipeline.js) and review it line-by-line (or run it in an isolated test environment) before supplying real credentials. If you proceed, create least-privilege API keys (restrict to needed scopes and test with a dry-run), and prefer non-production stores/accounts for initial testing.

skill-dropship-product-pipeline v1.0.0

Full end-to-end dropship product lifecycle — from CJ Dropshipping search to a live WooCommerce listing with an AI-generated hero image.

Pipeline Steps

1. CJ Sourcing — Keyword search or direct product ID. Margin check (min 40%). Variant extraction.
2. Hero Image — Flux Kontext Dev (fal-ai/flux-kontext/dev) using the real CJ product photo as reference. Lifestyle background, product in active use, warm mood, 1:1 square.
3. WooCommerce Publish — Upload hero + gallery images, create product, set price/SKU.
4. CJ Mapping — Add product to your cj-supplier-selection.json for auto-fulfillment via skill-dropshipping-fulfillment.

Pipeline ends at WooCommerce publish. Video creation is a separate step — use skill-tiktok-video-pipeline.

Usage

# Source by keyword — finds best margin product
node scripts/pipeline.js --keyword "ring light" --sell-price 89

# Source by CJ product ID — skip sourcing step
node scripts/pipeline.js --cj-pid 2603020206551636100 --sell-price 69

# Dry run — skip WooCommerce publish (test mode)
node scripts/pipeline.js --keyword "desk lamp" --sell-price 99 --dry-run

Options

Flag	Required	Description
--keyword	✅ (or --cj-pid)	CJ search keyword
--cj-pid	✅ (or --keyword)	Known CJ product ID, skips search
--sell-price	✅	Selling price in your local currency
--dry-run	❌	Skip WooCommerce publish
--lang	❌	Language: en, ar, both (default: en)
--min-margin	❌	Minimum margin % (default: 40)

Credentials Setup

Create credential files or use environment variables:

# CJ Dropshipping
export CJ_ACCESS_TOKEN="your-cj-token"

# WooCommerce
export WOO_URL="https://yourstore.com"
export WOO_KEY="ck_..."
export WOO_SECRET="cs_..."

# WordPress media upload
export WP_URL="https://yourstore.com"
export WP_USER="your-wp-username"
export WP_APP_PASS="your-app-password"

# AI services
export FAL_KEY="your-fal-key"        # Flux Kontext hero image
export OPENAI_API_KEY="your-key"     # GPT-4o fallback for hero

Hero Image Standard

• Model: Flux Kontext Dev (fal-ai/flux-kontext/dev)
• Method: Real CJ product photo as image_url input — product appearance locked from frame 1
• Style: Lifestyle background, product in active use, shallow DOF, warm mood, 1:1 square
• Fallback: GPT-4o images/edits if Flux fails

Output Files

• hero-{slug}.jpg — Product hero (Flux Kontext or GPT-4o fallback)
• pipeline-result-{slug}.json — WooCommerce product ID, CJ mapping, cost/margin breakdown

Economics

• Min margin default: 40%
• Hero image cost: ~$0.05–0.10 per product (Flux Kontext)
• Total pipeline cost per product: under $0.20

Recommended Stack

For the full dropship automation stack:

1. This skill — source + list products
2. skill-tiktok-video-pipeline — create video ads
3. skill-dropshipping-fulfillment — auto-fulfill orders via CJ
4. skill-woocommerce-stock-monitor — OOS alerts