CartPilot

• Risk level: Low
• Analyzed: Apr 2, 2026, 10:08 AM
• Findings: 0
• Version: 1.0.0

Overview

CartPilot's code and runtime instructions align with its stated checkout-optimization purpose and do not request unrelated credentials, installs, or system access.

This skill appears coherent and only needs user-provided cart details (screenshots, links, coupon rules, fees). Before using: do not paste account credentials or private-session screenshots containing auth tokens; prefer screenshots that redact personal/account info. Be aware the agent may call other platform-specific shopping skills (those skills' permissions are separate). The included publish script is for maintainers only and requires clawhub/node to run; it is not executed during normal skill use.