Rakuten Shop Analysis
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is a coherent Rakuten shop-analysis helper that sends the user-provided shop URL or shopCode to a disclosed hosted backend and does not show credential use, persistence, or unrelated local access.
This skill looks purpose-aligned and lightweight. Before installing, make sure you are comfortable sending the Rakuten shop URL or shopCode you type to https://rakuten.845817074.xyz, and avoid adding unrelated confidential information to the request.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The Rakuten shop link or shopCode you provide will be sent to the operator's backend service for analysis.
The skill discloses that the user-provided shop identifier is sent to an external hosted backend; this is purpose-aligned, but users should know the input leaves the local environment.
这个 skill 会把你提供的店铺链接或 `shopCode` 发送到托管后端进行分析
Use it only for shop identifiers you are comfortable sharing with the hosted service, and avoid including unrelated private information in the input.
Users have less registry-level provenance information about where the skill package and hosted service come from.
The package includes runnable Node scripts, but registry source/homepage and install metadata are sparse; this is not suspicious by itself, but it is a provenance detail users may want to verify.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Prefer installing from a trusted registry or the repository identified by the publisher, and confirm the backend domain matches the documented one.