ecommerce-expert

PassAudited by ClawScan on May 5, 2026.

Overview

This is a coherent instruction-only e-commerce advice skill; it discusses payment and order systems, but the visible artifacts do not install code or direct autonomous purchases.

This skill appears safe to install as an instruction-only e-commerce reference. Treat any copied payment, order, or cloud-service example as production-sensitive code: review it, test in sandboxes, scope credentials tightly, and require human approval for real financial or fulfillment actions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used with real store, payment, or order-management tools, advice from this skill could influence high-impact business actions.

Why it was flagged

The skill covers payment and checkout workflows, which can affect real purchases if combined with external commerce tools. This is expected for an e-commerce expert skill, and the artifact does not instruct autonomous purchases.

Skill content
- **Payment Methods**: Credit cards, digital wallets, BNPL, cryptocurrencies
Recommendation

Use sandbox payment gateways during development and require explicit human approval before charges, refunds, order edits, or fulfillment actions.

What this means

Copied example code may require access to payment, search, database, cache, and cloud services.

Why it was flagged

The reference code uses provider credentials and cloud account configuration that would be sensitive if a user implemented the example. This is purpose-aligned for an e-commerce platform and is not shown as a required skill credential.

Skill content
process.env.STRIPE_SECRET_KEY ... process.env.ALGOLIA_ADMIN_KEY ... process.env.AWS_REGION
Recommendation

Use least-privilege service accounts, keep secrets out of logs and client-side code, and separate test credentials from production credentials.