v1.0.0

Shopify Influencer Campaign

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:25 AM.

Analysis

This skill appears to generate Shopify influencer campaign planning guidance, with only a small Bash helper that delegates the request to a local OpenClaw agent.

GuidanceThis skill looks safe for planning an influencer campaign. Use it for non-secret campaign details such as niche, product category, goals, URL, and budget, but do not paste passwords, API keys, customer lists, or confidential contracts unless you are comfortable providing them to the local agent workflow.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Unexpected Code Execution

SeverityInfoConfidenceHighStatusNote

analyze.sh

openclaw agent --local --message "${PROMPT}" --session "${SESSION_ID}"

The helper executes a local OpenClaw agent command with the generated campaign prompt. This is consistent with producing the requested marketing report, and the artifact does not show unrelated shell commands, downloads, credential use, or destructive operations.

User impactYour campaign request is passed to a local OpenClaw agent to generate the report.

RecommendationAvoid including secrets or private credentials in the campaign prompt; store niche, URL, goals, and budget are appropriate inputs.