AirShelf Agentic Commerce Platform
PassAudited by ClawScan on May 1, 2026.
Overview
This looks like a coherent shopping helper that uses a public AirShelf API, with the main cautions being checkout-link creation and optional email sharing.
Before installing, be comfortable that this skill will contact dashboard.airshelf.ai for shopping searches and checkout links. Use it for product discovery and comparison, but require confirmation before checkout creation, avoid sharing your email unless needed, and verify merchant checkout pages and important product claims such as allergens, pricing, and return policies before buying.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could create a cart or checkout link for selected items; it should not do this unless you have chosen the product and quantity.
The skill exposes an external POST action that creates a checkout/cart session. This is purpose-aligned for commerce and the artifact says payment is completed by the user on the merchant site, but checkout creation should remain user-approved.
curl -s -X POST "https://dashboard.airshelf.ai/api/merchants/MERCHANT_ID/checkout" ... -d '{"items": [{"product_id": "PRODUCT_ID", "quantity": 1}]}'Require explicit confirmation before checkout creation and review product, quantity, merchant, price, and shipping terms before opening or paying through the checkout URL.
If used, your email or an agent identifier may be sent to AirShelf or the merchant for order tracking or attribution.
The checkout API may receive a customer email and agent identifier. This external data sharing is disclosed and optional, but it is still personal or tracking-related information.
`customer` — Optional: `{email: "..."}` for order tracking
- `agent_id` — Optional: your agent identifier for attributionOnly provide an email or identifier when needed, and confirm you are comfortable sharing it with the external commerce service.
You have less registry-provided context for verifying who operates the service behind the shopping API.
The skill is instruction-only and has no code install path, but the registry metadata does not provide a source repository or homepage for independent provenance review of the commerce integration.
Source: unknown Homepage: none
Verify the AirShelf domain and merchant checkout destination before relying on recommendations or proceeding with a purchase.