v1.0.0

E-Commerce Social Media Monitor

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:21 AM.

Analysis

This is an instruction-only social media monitoring helper, with the only notable issue being a user-directed install command that points to an external GitHub-based skill package.

GuidanceThis skill appears safe as an instruction-only advisory workflow for social media monitoring. If you choose to use the install command shown in SKILL.md, inspect the referenced GitHub repository first and only install it if you trust the source.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

npx skills add nexscope-ai/eCommerce-Skills --skill social-media-monitor -g

The skill documentation includes a user-directed command that would install from an external GitHub-named source with a global flag, while the provided artifact set itself contains only SKILL.md and no install spec.

User impactIf a user runs the install command, they may install code or skill content from a source outside the reviewed artifact.

RecommendationBefore running the npx install command, review the referenced repository and confirm it is the intended trusted source.