Shopify Profit Calculator
v1.0.0Shopify profit calculation agent. Computes true net profit per product or order by subtracting COGS, Shopify fees, Stripe/payment fees, ad spend, and shippin...
⭐ 0· 94·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the SKILL.md. The skill is an instruction-only profit calculator that asks for order/product data, computes margins, and saves reports/COGS to a local workspace — all consistent with its stated purpose. The only minor mismatch is that registry metadata lists no config paths while the SKILL.md declares it will create ~/shopify-profit/ (this is expected behavior for an instruction-only tool but worth noting).
Instruction Scope
Instructions stay within the expected scope (parse pasted CSV rows, accept verbal descriptions/screenshots, compute fees and margins). The skill explicitly instructs the agent to create and write files in ~/shopify-profit/ (memory.md, products.md, reports/) and to save COGS when the user runs set cogs. This is coherent for the use-case but means the skill will persist order/product data and possibly PII locally — users should be aware of what they paste or provide. The SKILL.md does not instruct the agent to read unrelated system files or require external exfiltration.
Install Mechanism
No install spec, no downloads, and no code files — instruction-only. This is low-risk from an installation perspective because nothing external is written or installed by default.
Credentials
No environment variables, credentials, or external API keys are requested. That is proportionate for a local calculator that relies on user-pasted data rather than direct Shopify/Stripe API access.
Persistence & Privilege
always:false and user-invocable (normal). The skill persists data in ~/shopify-profit/ which gives it lasting local state (reports, saved COGS). This is expected for a reporting tool but is a privacy consideration: saved order/customer data could accumulate if not cleaned. The skill does not request elevated system privileges or modify other skills.
Assessment
Before enabling or using this skill, consider: (1) It will create ~/shopify-profit/ and save COGS, reports, and any pasted order data there — avoid pasting customer-identifying information unless you are comfortable storing it locally. (2) There are no external API keys required, so the skill operates on data you provide; if you want it to pull data from Shopify/Stripe automatically you would have to provide credentials separately (not required by this skill). (3) Review the GitHub homepage/source yourself (link in metadata) to verify the author and implementation if you want higher assurance. (4) If you are concerned about data retention, run it in a limited or disposable environment (or delete ~/shopify-profit/ after use) and avoid uploading screenshots or raw CSVs containing PII. (5) The skill declares Bash as an allowed tool — confirm the agent runtime's permissions so it cannot access other files you don't intend to share. Overall, the skill appears to do what it says, but treat persistent local files and any pasted data as potentially sensitive.Like a lobster shell, security has layers — review code before you run it.
latestvk97dakwd62mfk7x0n84fw9qh0n839yb3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.