ClawHub

E-Commerce Social Media Marketing

v1.0.0

Plan social media marketing strategy for e-commerce brands. Content calendars, platform selection, posting schedules, engagement tactics, and social commerce...

⭐ 1· 396·0 current·0 all-time
bynexscope-ai@nexscope
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name, description, and SKILL.md capabilities align: planning social media strategy, content calendars, platform recommendations, and social-commerce guidance are coherent with the skill's stated purpose. The SKILL.md references Nexscope and related GitHub repos even though the registry entry has no homepage/source; this is a provenance mismatch worth noting but not necessarily malicious.
✓
Instruction Scope
Runtime instructions describe collecting user-provided marketing details and asking one structured follow-up; they do not instruct reading system files, environment variables, or accessing unrelated data. The doc mentions 'research and analyze' without specifying data sources — this could imply using web resources or internal heuristics but is not itself an instruction to exfiltrate or access secrets.
ℹ
Install Mechanism
The skill is instruction-only (no install spec in registry), which is low-risk. However, SKILL.md includes an example install command using 'npx skills add nexscope-ai/eCommerce-Skills ...' — running that would download and execute third-party code. Because the registry metadata does not include an install spec or homepage, verify the referenced package/repo before running npx or any external installer.
✓
Credentials
No required environment variables, credentials, or config paths are declared or referenced. That is proportionate for a planning/advice skill; it does not request unrelated secrets or system access.
✓
Persistence & Privilege
always is false and the skill does not request special persistence or modify other skills. The default ability for the agent to invoke the skill autonomously is normal; there are no extra privileges requested.
Assessment
This skill appears to be what it says: a social-media strategy advisor and is instruction-only, so it won't by itself access your system or credentials. Before running the SKILL.md's example 'npx' install command, verify the nexscope-ai/eCommerce-Skills package or GitHub repo (inspect its code and maintainers). Don't run arbitrary npx/npm commands you don't trust. If you plan to connect accounts (Instagram, TikTok, Shopify, etc.), only provide API keys or tokens you trust and consider limiting the skill's autonomous invocation or reviewing its code first. If provenance matters, ask the publisher for a homepage or source repository and review that repo before installing anything.

Like a lobster shell, security has layers — review code before you run it.

latestvk975f2whbpkxj3r0c0ysfmcc8183n8gf

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments