Inventory Source
v1.0.0Inventory Source — dropship automation, supplier management, product feeds, inventory sync, and order routing.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and code all target Inventory Source API (api.inventorysource.com). The only required credential is INVENTORYSOURCE_API_KEY, which is appropriate for the stated functionality (listing suppliers/products, syncing inventory, routing orders).
Instruction Scope
SKILL.md directs the agent to run the included CLI script and only interact with Inventory Source endpoints. The script does, however, implement a fallback credential lookup that reads a .env file from a workspace path (~/.openclaw/workspace/.env or WORKSPACE/.env). That file read is limited to parsing lines for the requested variable, but the SKILL.md does not document this behavior.
Install Mechanism
No install spec or external downloads present; the skill is instruction-only with a bundled Python stdlib script. Nothing is written to disk beyond running the provided script.
Credentials
The declared primaryEnv INVENTORYSOURCE_API_KEY matches the script's auth usage. The script also consults WORKSPACE (and a default ~/.openclaw/workspace path) to find a .env file as a fallback; WORKSPACE is not declared in requires.env. This is a minor mismatch that affects where the key may be loaded from.
Persistence & Privilege
The skill does not request permanent/always-on privileges, does not modify other skills or global agent settings, and has normal autonomous-invocation defaults. No elevated persistence behavior is present.
Assessment
This skill appears to do what it says: it calls Inventory Source APIs and requires only an INVENTORYSOURCE_API_KEY. Before installing: (1) Verify the publisher/homepage if you don't already trust them. (2) Be aware the script will look for the API key in INVENTORYSOURCE_API_KEY and — as a fallback — in a .env file located at $WORKSPACE/.env or ~/.openclaw/workspace/.env (WORKSPACE is not declared in the skill manifest). If you keep sensitive secrets in .env files, consider moving or restricting them. (3) Limit the API key's permissions where possible (use a key scoped to necessary actions). (4) Because the skill can be invoked autonomously, consider whether you want the agent to call external APIs without manual review. If you want to be extra cautious, inspect or run the script in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
📋 Clawdis
EnvINVENTORYSOURCE_API_KEY
Primary envINVENTORYSOURCE_API_KEY
latest
📋 Inventory Source
Inventory Source — dropship automation, supplier management, product feeds, inventory sync, and order routing.
Requirements
| Variable | Required | Description |
|---|---|---|
INVENTORYSOURCE_API_KEY | ✅ | Inventory Source API key |
Quick Start
# List connected suppliers
python3 {{baseDir}}/scripts/inventory-source.py list-suppliers
# Get supplier details
python3 {{baseDir}}/scripts/inventory-source.py get-supplier <id>
# List products
python3 {{baseDir}}/scripts/inventory-source.py list-products --page "1" --per-page "50"
# Get product details
python3 {{baseDir}}/scripts/inventory-source.py get-product <id>
# Trigger inventory sync
python3 {{baseDir}}/scripts/inventory-source.py sync-inventory
# List orders
python3 {{baseDir}}/scripts/inventory-source.py list-orders --page "1" --status <value>
# Get order details
python3 {{baseDir}}/scripts/inventory-source.py get-order <id>
# Route order to supplier
python3 {{baseDir}}/scripts/inventory-source.py route-order <id>
# List connected stores
python3 {{baseDir}}/scripts/inventory-source.py list-integrations
# Get product feed
python3 {{baseDir}}/scripts/inventory-source.py get-feed <id>
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/inventory-source.py | Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
Comments
Loading comments...
