Shopify Product Uploader

This skill appears to do what it claims: it will prompt you to provide your Shopify store handle and an Admin API token (shpat_...) and then use that token to call your store's Admin API to create/update products and inventory. Before installing or activating it: 1) Prefer creating a custom app token with only the minimum scopes listed (write_products, read_products, write_inventory, read_inventory, write_collections, read_collections) rather than using a full-store owner token. 2) Confirm how OpenClaw stores long‑term memory in your deployment (encryption, who/what can access those secrets) — if you’re uncomfortable, don’t allow persistent storage and instead require the token per session. 3) Understand the agent can act autonomously by default; if you want to prevent background changes, disable autonomous invocation or require explicit user confirmation (the SKILL.md says it will ask for YES before uploading, but persistent tokens enable later uploads). 4) Verify the skill source/owner before granting access — there’s no homepage and the publisher is an opaque ID. 5) Rotate the token if you ever revoke the skill’s access. If you follow these precautions the skill is coherent with its purpose and usable; if you cannot limit token scope or memory persistence, treat it as higher risk.