ClawHub

Commerce Bi Copilot

v1.0.0

Turn ecommerce exports, KPI notes, and natural-language business questions into metric alignment notes, anomaly diagnoses, operator-ready summaries, and prio...

⭐ 0· 52·0 current·0 all-time
byhaidong@harrylabsj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, SKILL.md, and the included handler code all implement the same heuristic, offline brief-generation use case. There are no unrelated required env vars, binaries, or config paths.
✓
Instruction Scope
SKILL.md explicitly says it does NOT access live systems and the handler code operates only on the provided text (keyword detection, driver trees, drilldowns, and formatted outputs). There are no instructions to read system files, secrets, or transmit data externally.
✓
Install Mechanism
This is an instruction-only skill with no install spec. The package includes Python source and tests only — nothing is downloaded or extracted at install time.
✓
Credentials
No environment variables, primary credential, or config paths are required. The skill does not declare or appear to access secrets or external service tokens.
✓
Persistence & Privilege
always is false and there is no mechanism for the skill to force persistent inclusion or modify other skills or global agent settings.
Assessment
This skill appears to do what it claims: turn pasted KPI notes into operator-ready briefs using local heuristics. Before installing, review the handler.py source if you want maximum assurance (the code is included). Do not paste sensitive secrets or raw export files containing credentials or PII into prompts — the skill will process whatever text you provide. Note that the agent can call skills autonomously by default, but this skill does not request extra privileges or credentials, and it has no install-time downloads.

Like a lobster shell, security has layers — review code before you run it.

latestvk972vv4hb5ybvxkp02dvp26kvd84re2t

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments