bee-products-delete
PassAudited by VirusTotal on May 13, 2026.
Overview
Type: OpenClaw Skill Name: bee-products-delete Version: 2.0.2 The skill is a legitimate implementation for deleting products via the Bee Website Builder Open API (tradew.com). The code in index.js correctly validates inputs, enforces a batch limit of 100 items, and communicates only with the official API endpoint using standard Bearer token authentication. The documentation in SKILL.md and skill.json includes safety constraints, such as requiring manual language selection rather than AI inference, which reduces the risk of accidental bulk deletions.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked with the wrong language or product IDs, up to 100 products could be moved to the recycle bin.
The code sends a mutating product-delete request to the provider API using the supplied language and product ID list. This matches the skill purpose, but it can change website catalog data.
fetch("https://platform.tradew.com/openapis/products/delete", { method: "POST", ... body: JSON.stringify(body) })Confirm the language and product IDs before using the skill, and verify that recycle-bin recovery is available for your account.
Anyone or any agent with this key may be able to perform account actions allowed by the key, including product deletion.
The skill requires a Bee API key with permissions to access the deletion API. This is expected for the integration and no credential logging or unrelated transmission is shown.
`api_key` (string, **Required**) ... API authentication key used to identify the caller and control interface access permissions.
Use the platform’s secure credential mechanism where possible, limit the API key’s permissions if supported, and rotate it if exposed.