Market Intelligence Claw
v1.0.3Real-time strategic intelligence layer for ecommerce and digital businesses. Use this skill whenever the user asks about competitors, market trends, pricing,...
⭐ 0· 152·0 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (real-time market intelligence) align with the instructions: the skill uses web search by default and optionally SerpApi, Rainforest, DataForSEO, NewsAPI, and Reddit for deeper data. No unrelated credentials or system access are requested in metadata.
Instruction Scope
SKILL.md contains extensive step-by-step plans and explicit privacy safeguards (never send PII, show planned searches, session-only keys). Two things to note: (1) the guidance 'Always use it proactively when the user is making any strategic business decision' is broad and could cause frequent/automatic research runs if the agent is allowed to invoke skills autonomously; (2) the skill depends on the agent and the user following the stated consent/workflow (show plan / request approval) — the security model relies on that discipline.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install profile. All external interactions are via third-party public APIs described in SKILL.md.
Credentials
No required env vars or system config are declared. The skill asks users to supply API keys/credentials only for optional tiers (SerpApi, Rainforest, DataForSEO, NewsAPI, Reddit) which is proportionate to the capabilities offered. Minor accuracy note: DataForSEO uses HTTP Basic (login:password) rather than an API-key model — the doc requests 'dedicated API key' as a general best practice but otherwise appropriately warns about read-only/dedicated keys and spend caps.
Persistence & Privilege
always:false and no install-time persistence are used. The skill explicitly states API credentials are session-only and never persisted. Autonomous invocation is allowed (platform default); combine that with the 'proactive' instruction if you plan to allow the agent to call skills without explicit user confirmation.
Assessment
This skill appears coherent for market research. Before enabling it: (1) Decide whether you want the agent to call skills autonomously — the skill recommends 'use proactively', which could lead to repeated external queries if autonomous invocation is allowed. (2) If you enable paid tiers, create dedicated read-only keys/accounts for this skill, set strict monthly spend caps, and do NOT reuse production credentials. (3) Never paste private customer data, revenue figures, or internal credentials into prompts — the skill's docs forbid this, but the agent will only follow that rule if the conversation content is clean. (4) Expect the skill to show a Research Plan for approval before running paid queries; insist on that behavior if you give it keys. If you want lower blast radius, start with the free web_search tier only and only enable paid tiers when you need them.Like a lobster shell, security has layers — review code before you run it.
latestvk97cnez1gf86pd5tnzs48qaeg983f4wb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.