bee-products-delete
AdvisoryAudited by Static analysis on May 13, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked with the wrong language or product IDs, up to 100 products could be moved to the recycle bin.
The code sends a mutating product-delete request to the provider API using the supplied language and product ID list. This matches the skill purpose, but it can change website catalog data.
fetch("https://platform.tradew.com/openapis/products/delete", { method: "POST", ... body: JSON.stringify(body) })Confirm the language and product IDs before using the skill, and verify that recycle-bin recovery is available for your account.
Anyone or any agent with this key may be able to perform account actions allowed by the key, including product deletion.
The skill requires a Bee API key with permissions to access the deletion API. This is expected for the integration and no credential logging or unrelated transmission is shown.
`api_key` (string, **Required**) ... API authentication key used to identify the caller and control interface access permissions.
Use the platform’s secure credential mechanism where possible, limit the API key’s permissions if supported, and rotate it if exposed.