Mercadolibre Return Guide
v1.0.0Mercado Libre return management and authorization code agent. Complete returns workflow management for ML sellers — obtain return codes, manage return shipme...
⭐ 0· 79·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Mercado Libre return management) match the content of SKILL.md. The skill is instruction-only and does not request unrelated credentials, binaries, or config paths — nothing appears extraneous for a returns guidance agent.
Instruction Scope
The SKILL.md stays within the expected scope (how to obtain return codes, dispute handling, metrics, and process steps). Minor note: the header includes allowed-tools: Bash even though the document contains no Bash commands; this is unnecessary but not inherently dangerous. The guide tells the user/agent to 'login to ML seller account' and copy codes — steps are manual/UI-oriented and do not require the skill to access secrets or system files.
Install Mechanism
No install spec and no code files present. As an instruction-only skill, it does not download or write executables to disk, which is the lowest-risk install profile.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. This is proportionate for a documentation/guide skill; although it references logging into an ML account in the instructions, it does not request any credentials itself.
Persistence & Privilege
always is false and autonomous invocation is allowed (the platform default). The skill does not request persistent system privileges or modify other skills. Given its read-only, instructional nature, requested privileges are appropriate.
Assessment
This skill is an instruction-only returns guide and does not ask for credentials or install software — overall low risk. Before installing: (1) Confirm you trust the listed homepage/repo; (2) Never paste your Mercado Libre account credentials into a third-party tool — the guide assumes manual UI steps; (3) If you expect the agent to act on your behalf, prefer granting least-privilege (read-only or marketplace API tokens) and verify what the agent will do with them; (4) The SKILL.md declares allowed-tools: Bash even though it contains no shell commands — if the platform grants the skill shell access, limit its runtime permissions. If you need the agent to perform actions (not just provide guidance), verify how it will authenticate and where credentials are stored before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97eznp1dd4b6zpkj1dt4jdced83h8qr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.