Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Orderflow
v1.0.0Automate order routing, fulfillment, and inventory management across channels. Use when the user needs real-time order processing, multi-warehouse routing, o...
⭐ 0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Requested binaries (curl, node) and required env vars (SHOPIFY_API_KEY, SHOPIFY_API_PASSWORD, WAREHOUSE_API_TOKEN, SLACK_WEBHOOK_URL) are consistent with an order-routing/automation skill. However, the SKILL.md advertises many other integrations (Google Sheets, Twilio SMS, SendGrid, ShipStation, multiple 3PLs and carriers) whose credentials are not declared in requires.env. That mismatch suggests either omissions in the manifest or that the skill will ask for or expect additional secrets at runtime — an incoherence worth clarifying.
Instruction Scope
SKILL.md is an instruction-only runtime spec that directs the agent to sync inventory, route orders, generate shipping labels, send Slack messages, create Google Sheets POs, and send SMS/email. Those actions involve reading and transmitting sensitive order/customer/inventory data to multiple external endpoints. The instructions as provided are broad and grant the agent wide discretion (scheduling periodic syncs, exception handling, auto-fulfill), but they don't enumerate how credentials for the non-declared integrations will be supplied, nor do they constrain what data fields may be shared externally. That openness increases the risk of unintended data exposure or overbroad access.
Install Mechanism
No install spec and no code files—this is instruction-only. That's lower risk from an installation/executable perspective because nothing is dropped to disk by an installer. The runtime will rely on available system binaries (curl, node).
Credentials
The four declared env vars are sensitive but reasonable for core Shopify->warehouse->Slack operation. Concerns: (1) WAREHOUSE_API_TOKEN is opaque and could grant broad access to internal warehouse systems — it should be scoped and limited. (2) Many additional integrations mentioned in the docs (Google Sheets, Twilio, SendGrid, ShipStation, etc.) are not reflected in requires.env, so it's unclear how their credentials are handled. Requiring fewer, narrowly-scoped credentials is preferable; as-is, credential handling is underspecified.
Persistence & Privilege
always is false and there is no install-time modification of other skills or system-wide settings documented. The skill can be invoked autonomously (default), which is normal for skills; this combined with broad/incomplete credential declarations increases risk, but autonomous invocation itself is not a reason to block.
What to consider before installing
Before installing, get answers to these questions from the skill author or maintainer: (1) Provide a complete list of all credentials the skill will ever ask for (Google API creds, Twilio, SendGrid, ShipStation, 3PLs, etc.) and whether any are optional. (2) Confirm the minimum scope for WAREHOUSE_API_TOKEN and SHOPIFY credentials (read-only vs. read/write; restrict to test/staging when possible). (3) Explain where order/customer data is sent (exact domains/webhooks/Google Sheets accounts) and retention/PII handling policies. (4) Ask for examples of the exact commands or API calls the agent will perform (so you can audit for data exfiltration). (5) Test in a staging environment with limited-scope tokens before granting production credentials. Finally, treat the Slack webhook as a potential exfiltration channel — only provide a webhook you control and that is scoped to an appropriate channel.Like a lobster shell, security has layers — review code before you run it.
latestvk972ersb7f1aekktaf65weyf1n83g9fn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📦 Clawdis
OSmacOS · Linux · Windows
Binscurl, node
EnvSHOPIFY_API_KEY, SHOPIFY_API_PASSWORD, WAREHOUSE_API_TOKEN, SLACK_WEBHOOK_URL