Walmart Store Analyzer
v1.0.0Walmart marketplace store traffic and performance analysis agent. Auto-analyze Walmart seller traffic reports, item performance, search analytics, and compet...
⭐ 0· 84·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description match the instructions: it analyzes Walmart seller reports and provides recommendations. However, the SKILL.md lists CLI-style commands (e.g., 'walmart traffic <data>') that imply a 'walmart' command-line tool, yet the skill declares no required binaries and provides no install instructions — this is an inconsistency that may simply be a human-readable command contract rather than a real executable, but it should be clarified.
Instruction Scope
The runtime instructions ask the user to paste traffic reports, item IDs, ad data, etc., and explain how the agent will analyze those inputs. They do not instruct the agent to read system files, environment variables, or contact external endpoints. One operational note: the skill lists allowed-tools: Bash, which would permit shell use if the agent runtime supports it, but the SKILL.md itself does not direct any local file or env access.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only. That minimizes risk from hidden downloaded code. This is consistent with the lack of required binaries, though it reinforces the earlier note that the CLI-like commands are probably conceptual rather than actual executables.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate to an analysis agent that expects users to paste their data rather than the skill pulling it from external accounts.
Persistence & Privilege
always is false, and there are no claims of modifying other skills or system-wide settings. The skill does not request persistent presence or special privileges.
Assessment
This is an instruction-only skill that expects you to paste your Walmart seller/traffic data for analysis. Before installing or using it: (1) Confirm the GitHub repository (homepage) to verify whether a real 'walmart' CLI/tool exists or whether the listed commands are just shorthand — the SKILL.md currently provides no binary or install. (2) Do not paste credentials, API keys, or any sensitive PII into the tool's input; provide only the analytics data necessary (aggregated metrics are safer). (3) Be aware that allowed-tools: Bash means the runtime could run shell commands if it were given such instructions — the current SKILL.md doesn't do so, but avoid sending files or secrets that a shell could read. (4) If you need automation (periodic pulls from Walmart APIs), prefer a skill that explicitly declares and justifies the required credentials and provides an install mechanism. Overall the skill appears coherent for manual data analysis, but clarify the 'walmart' CLI references and avoid pasting secrets.Like a lobster shell, security has layers — review code before you run it.
latestvk978zcw6aqsr2j0y6wed5se7dx83h9r3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.