Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Shopify Facebook Ad Spy

v1.0.0

Facebook & Meta ad intelligence for Shopify stores. Analyze competitor ad creatives, copy angles, targeting strategy, and funnel structure to reverse-enginee...

0· 71·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Skill name and description (Facebook/Meta ad intelligence for Shopify stores) match the provided code: the script builds an ad‑analysis prompt and asks a model to produce a report. However the package metadata declares no required binaries while analyze.sh clearly invokes 'openclaw' and 'python3' (and implicitly other standard shell tools). The missing declared dependencies is an incoherence.
!
Instruction Scope
SKILL.md and analyze.sh are narrowly focused on generating an advertising report, and they do not attempt to read arbitrary system files. The concern: the script invokes the 'openclaw' agent CLI with the user-supplied input embedded in the prompt. That CLI will send data to whatever model/provider it is configured to use (network or local), so sensitive inputs (private store URLs, internal data) could be transmitted. The script also silently depends on python3 to parse JSON; those runtime calls are not documented in SKILL.md.
Install Mechanism
There is no install spec (instruction-only skill) and no archive downloads — this is low install risk. But a code file is present that expects the 'openclaw' CLI to be installed/configured; the lack of declared required binaries is inconsistent with the observed runtime behavior.
Credentials
The skill does not request environment variables or credentials in its metadata, which is good. Nevertheless, it depends on an external agent CLI that may itself rely on API keys or credentials configured in the environment (~/.config, env vars) to contact model providers. Because those credentials are not declared or mentioned, there is a risk the skill will cause use or leakage of preconfigured model/provider credentials when executed.
Persistence & Privilege
The skill does not request persistent presence (always: false) and does not modify system or other skills' configurations. It simply runs a one‑shot script, so it does not ask for elevated persistence privileges.
What to consider before installing
This skill appears to do what it claims (generate Facebook/Meta ad reports), but it has two practical concerns you should address before installing/using it: - Missing declared dependencies: analyze.sh calls the 'openclaw' CLI and 'python3' but the skill's metadata does not list these as required binaries. Ensure you have those tools installed and understand how the openclaw CLI is configured on your machine. - Potential data leakage via the agent: the script sends your exact input (niche names or store URLs) to the openclaw agent. If the agent is configured to use remote model APIs (or any external service), that input and the generated prompt may be transmitted off‑device. Do not pass private URLs, account tokens, or proprietary data unless you trust the configured model/provider. Recommended actions: - Inspect and run the analyze.sh script in a sandboxed environment first (or read it thoroughly — it is short). - Confirm where your openclaw CLI is pointing (local model vs remote provider) and whether API keys or provider credentials are present in your environment or config files. - If you want to proceed, prefer running with a local model or in an environment where outgoing network access is controlled, and avoid entering sensitive store credentials or private data into the prompt. If you want, provide the output of `which openclaw && openclaw --version` (run in a safe environment) and I can help interpret whether the CLI will transmit data remotely.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ah7y4c2fabszrk1p6wnqvjh83cmgw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments