Security audit
Security checks for vulnerabilities and agentic risk
This skill previews a future Gmail–Shopify integration and offers an optional waitlist signup requiring explicit consent.
Expect preview information and an optional waitlist, rather than an active integration. Signup shares your email, role, and any optional link or message with Agiexa. Review those details before consenting. The provider's future security claims were not independently verified.
The supplied code implements a waitlist submission, not the advertised integration capabilities. It neither accesses Gmail or Shopify data nor implements email processing, reply preparation, inventory analysis, or triggers. Although it contacts the named provider, waitlist enrollment is a materially different primary purpose and is not disclosed in the description.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
bins:
- curl
homepage: https://agiexa.com/integrations/gmail
---
The manifest at L003 presents 61 Gmail tools and two triggers for identifying emails, preparing replies, and matching supplier updates with inventory risks. In contrast, L071 explicitly instructs the agent not to perform those tasks because the capabilities are not yet available; the executable workflow at L091-L101 instead submits user contact and signup details to an Agiexa waitlist endpoint. Explicit consent protects the signup submission, but does not resolve the mismatch between the advertised operational integration and the actual prelaunch informational/signup behavior.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Apps: Gmail, Shopify
- Tools: `GMAIL_FETCH_EMAILS`, `GMAIL_REPLY_TO_THREAD`, `GMAIL_SEND_EMAIL`
> Act as my Shopify customer support assistant. Review customer emails asking about orders, product prices, availability, or other store-related questions. Match each inquiry to the relevant Shopify order or product using reliable identifiers. Retrieve the necessary information and draft a concise, friendly email response. Use verified information only, and flag any missing details or ambiguous matches. Show me the complete draft before sending it. Never invent delivery dates, promise stock availability without checking, or send a customer email without my approval.
## Match Supplier Emails With Inventory Risks
No suspicious patterns detected.