Printful
v1.0.0Printful — print-on-demand products, orders, shipping rates, mockup generation, and store management.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required env var (PRINTFUL_API_KEY), and included CLI code all align with a Printful API integration. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md instructs running the included Python CLI and only declares PRINTFUL_API_KEY. The runtime code will also attempt a fallback: if the env var is missing it will look for the variable in a workspace .env file (WORKSPACE or ~/.openclaw/workspace/.env). That behavior is a convenience but not documented in SKILL.md and could read a local .env to extract the named variable.
Install Mechanism
This is an instruction-only skill with a bundled Python script and no install spec or external downloads. No archives or remote code are fetched at install time.
Credentials
Only PRINTFUL_API_KEY is required, which is proportionate. The code's fallback to read the key from a workspace .env is limited to the requested variable, but users should be aware the script will attempt to read that file if the env var is unset.
Persistence & Privilege
The skill does not request permanent/always inclusion and does not attempt to modify agent-wide configs or other skills. Autonomous invocation is enabled (default) but that is normal for skills and not a unique escalation here.
Assessment
This skill appears coherent and only needs your Printful API key. Before installing: (1) verify the PRINTFUL_API_KEY you provide has only the permissions you intend (avoid using broad account keys), (2) be aware the script will try to read WORKSPACE/.env or ~/.openclaw/workspace/.env to find the same variable if the env var is unset — ensure those files don't contain other secrets you don't want accessed, (3) note two small bugs in the script: mockup-related commands use mismatched placeholder names so they may fail (they likely produce 404s rather than anything malicious), and several CLI arguments are placeholders (e.g., 'JSON') so you must pass valid JSON for orders/files; (4) if you want extra assurance, inspect the script locally (it's stdlib-only) before running and confirm the homepage/author meet your expectations.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
👕 Clawdis
EnvPRINTFUL_API_KEY
Primary envPRINTFUL_API_KEY
latest
👕 Printful
Printful — print-on-demand products, orders, shipping rates, mockup generation, and store management.
Requirements
| Variable | Required | Description |
|---|---|---|
PRINTFUL_API_KEY | ✅ | Printful API token |
Quick Start
# List sync products
python3 {{baseDir}}/scripts/printful.py list-products --limit "20" --offset "0"
# Get product details
python3 {{baseDir}}/scripts/printful.py get-product <id>
# Create an order
python3 {{baseDir}}/scripts/printful.py create-order --recipient "JSON" --items "JSON array"
# List orders
python3 {{baseDir}}/scripts/printful.py list-orders --limit "20" --offset "0" --status <value>
# Get order details
python3 {{baseDir}}/scripts/printful.py get-order <id>
# Cancel an order
python3 {{baseDir}}/scripts/printful.py cancel-order <id>
# Estimate order costs
python3 {{baseDir}}/scripts/printful.py estimate-costs --recipient "JSON" --items "JSON array"
# Calculate shipping rates
python3 {{baseDir}}/scripts/printful.py get-shipping-rates --recipient "JSON" --items "JSON array"
# Browse product catalog
python3 {{baseDir}}/scripts/printful.py list-catalog --category <value>
# Get catalog product details
python3 {{baseDir}}/scripts/printful.py get-catalog-product <id>
# List mockup templates
python3 {{baseDir}}/scripts/printful.py list-mockup-templates --product-id <value>
# Generate mockup
python3 {{baseDir}}/scripts/printful.py create-mockup --product-id <value> --files "JSON"
# List warehouses
python3 {{baseDir}}/scripts/printful.py list-warehouses
# List supported countries
python3 {{baseDir}}/scripts/printful.py list-countries
# Get store info
python3 {{baseDir}}/scripts/printful.py get-store-info
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/printful.py | Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
Comments
Loading comments...
