Shopify Store Setup
v1.0.0Guides you through setting up a Shopify store, including plan selection, theme customization, product uploads, payment and shipping setup, domain connection,...
⭐ 0· 40·0 current·0 all-time
bynexscope-ai@nexscope
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and SKILL.md content all describe step-by-step Shopify setup guidance (plans, themes, products, payments, shipping, domain, launch). There are no declared credentials, binaries, or config paths that would be unexpected for a guidance-only skill.
Instruction Scope
SKILL.md contains only guidance and example prompts; it does not instruct the agent to read local files, access system paths, or exfiltrate data. Some example prompts imply performing configuration actions (e.g., "Set up my shipping rates"), but the skill does not include instructions or env var requirements to perform API calls — it reads as advisory, not an automated integrator.
Install Mechanism
The skill itself has no install spec in the registry (instruction-only), which is low-risk. However, SKILL.md includes an 'Install' example that runs `npx skills add nexscope/shopify-store-setup`. That line points users to fetch and execute code from npm (nexscope). Because this is only documentation (not an automated install), it isn't executed by the platform, but it elevates risk if a user follows it without verifying the external package/source.
Credentials
The skill declares no required environment variables, credentials, or config paths. For a guidance-only Shopify setup skill this is proportional. If a user expects the agent to perform real Shopify API operations, they should expect to provide a Shopify API key/token, which is not requested by this skill.
Persistence & Privilege
always is false and model invocation is allowed (default). No install-time persistence or modifications to other skills/system settings are requested. Agent autonomy combined with no credentials is not problematic here.
Assessment
This skill appears to be a read-only guide and is internally consistent, but take two precautions before using it: (1) provenance: the package's source and homepage are missing/unknown — avoid running the npx command in SKILL.md until you verify the 'nexscope/shopify-store-setup' package and the publisher (inspect the npm package contents / GitHub repo). (2) scope: if you want the agent to actually configure a Shopify store, you will need to create a Shopify API token with minimal required permissions and only provide it through secure channels; do not paste credentials into chat. If you plan to run any external install commands suggested in the documentation, review the code first and prefer using a test store and short-lived API credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97ev1d7dw90sx40dh3m3yvm9h842ggs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.