v1.0.0

Naver Shopping Search

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:29 AM.

Analysis

This skill appears to do what it says—query Naver Shopping—but it needs Naver API credentials that are not declared in the registry metadata.

GuidanceThis looks like a straightforward Naver Shopping search helper. Before installing, be aware that it needs Naver API credentials despite the metadata saying no credentials are required. Use credentials limited to the Naver Search API if possible, and remember that your product search queries will be sent to Naver.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

Requires the following in `.env`:
- `NAVER_Client_ID`
- `NAVER_Client_Secret`

The skill requires Naver API credentials, while the registry metadata lists no required environment variables or primary credential. The credential use is purpose-aligned, but users should notice the metadata under-declaration.

User impactYou will need to provide Naver API credentials for the skill to work, and those credentials will be used to make Naver Shopping API requests.

RecommendationOnly install/use this with a Naver API client ID and secret you are comfortable using for shopping search, and prefer a credential scoped only to the needed Naver Search API access.