Back to skill
v1.0.0

Competitor Price Analysis

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:16 AM.

Analysis

This is a coherent instruction-only pricing analysis skill with no code, credentials, or declared system access; the only notable item is a user-directed global install command to verify before running.

GuidanceThis skill appears safe and purpose-aligned as an instruction-only competitor pricing analysis prompt. Before using the optional install command, confirm that the Nexscope repository/package is the one you intend to trust. When using the skill, avoid sharing confidential margins, supplier terms, or unreleased pricing plans unless you are comfortable providing that business context to your agent.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities
SeverityLowConfidenceHighStatusNote
SKILL.md
npx skills add nexscope-ai/eCommerce-Skills --skill competitor-price-analysis -g

The skill documentation includes a user-directed global install command that fetches from an external GitHub collection. This is normal install guidance and not automatic behavior, but the command is not pinned to a specific version or commit in the artifact.

User impactIf a user follows the install command, they are trusting the external package/repository and installing the skill globally.
RecommendationVerify the repository/package source and contents before running the install command, especially because it uses a global install flag.