Competitive Research
v1.0.0Use when the user asks to research a competitor, map a market, analyze a category, or produce a competitive brief. Trigger phrases: 'research competitors of...
⭐ 0· 85·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and SKILL.md all describe a competitor/market research workflow. The only included code is a simple save-report.sh to write Deep Dive reports to a local workspace — which is a proportionate capability for a 'save report' feature.
Instruction Scope
Runtime instructions limit the agent to web_search, web_fetch, and the provided save-report.sh. One minor ambiguity: the SKILL.md includes the sentence 'Do not invoke shell commands, file system writes, or API calls beyond the above' while also listing and relying on scripts/save-report.sh (which writes files). This appears to be an editorial ambiguity rather than malicious scope creep, but it should be clarified: the save script is an allowed, explicit write-only action for Deep Dive mode. The skill also pulls public user review text and forum quotes; this is coherent with purpose but may surface public user-generated content (verbatim quotes) into saved reports.
Install Mechanism
No install spec and no third-party code downloads. Instruction-only skill with one small, readable shell script included — low-risk.
Credentials
No required environment variables or credentials. The only optional env var is OPENCLAW_WORKSPACE to control where reports are written (defaults to $HOME/.openclaw/workspace), which is proportionate to the save functionality.
Persistence & Privilege
always:false and no elevated privileges requested. The skill can write report files to a workspace when Deep Dive with save is explicitly requested; the included script creates its own directory and only writes the report file (it warns on overwrite). This is a reasonable, limited form of persistence.
Assessment
This skill appears to do what it says: search public web sources, extract sourced claims, and optionally save a report locally. Before installing or running Deep Dive mode, consider: 1) Clarify whether you (or the agent) should be allowed to save reports to $HOME/.openclaw/workspace — confirm the workspace path and check directory permissions. 2) The save-report.sh will write files and may overwrite same-named reports (it prints a warning). 3) The skill may include verbatim customer reviews and forum quotes in outputs; if you plan to store reports in a shared environment, review for sensitive or identifying content before sharing. 4) If you need the agent to avoid any file writes entirely, decline Deep Dive/save operations or set OPENCLAW_WORKSPACE to a safe location. Finally, if you want absolute clarity, ask the skill author to remove the ambiguous 'do not invoke shell commands...' sentence or explicitly document that save-report.sh is the only allowed write operation.Like a lobster shell, security has layers — review code before you run it.
latestvk97aq3egr4kr1dbk9r09xvqpm9838xqf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.