bee-products-delete

PassAudited by ClawScan on May 13, 2026.

Overview

This skill matches its stated purpose of moving selected Bee Website Builder products to the recycle bin, but users should confirm the product IDs because it can delete products in bulk.

Install only if you intend to let the agent delete Bee Website Builder products. Keep the Bee API key private, and review the selected language and product ID list before invocation.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked with the wrong language or product IDs, up to 100 products could be moved to the recycle bin.

Why it was flagged

The code sends a mutating product-delete request to the provider API using the supplied language and product ID list. This matches the skill purpose, but it can change website catalog data.

Skill content
fetch("https://platform.tradew.com/openapis/products/delete", { method: "POST", ... body: JSON.stringify(body) })
Recommendation

Confirm the language and product IDs before using the skill, and verify that recycle-bin recovery is available for your account.

What this means

Anyone or any agent with this key may be able to perform account actions allowed by the key, including product deletion.

Why it was flagged

The skill requires a Bee API key with permissions to access the deletion API. This is expected for the integration and no credential logging or unrelated transmission is shown.

Skill content
`api_key` (string, **Required**) ... API authentication key used to identify the caller and control interface access permissions.
Recommendation

Use the platform’s secure credential mechanism where possible, limit the API key’s permissions if supported, and rotate it if exposed.