Shopify Ab Testing

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to generate Shopify A/B testing guidance and does not show credential use, store modification, exfiltration, or destructive behavior.

This looks safe for generating A/B testing advice. Before installing, note that the included Bash script can call a local OpenClaw agent and may place your store description or URL into a local session, so avoid sharing sensitive business details unless necessary.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may run a local helper command rather than only displaying static instructions.

Why it was flagged

If this script is run, it invokes a local OpenClaw agent process through Bash. The command is purpose-aligned and scoped to generating the testing report, but it is still local command execution.

Skill content
openclaw agent --local --message "${PROMPT}" --session "${SESSION_ID}"
Recommendation

Review the included Bash script before use and provide only store details you are comfortable sending to the local agent session.

What this means

Store URLs, niches, or business context entered into the skill may become part of a local agent session context.

Why it was flagged

The script assigns a named session for the local agent invocation, which may associate the generated prompt and user-provided store context with that session.

Skill content
SESSION_ID="shopify-ab-testing-$(date +%s)"
Recommendation

Avoid entering sensitive business details unless you are comfortable with them being included in the local session context.