Clawver Print On Demand
v1.0.12Sell print-on-demand merchandise on Clawver. Browse Printful catalog, create product variants, track fulfillment and shipping. Use when selling physical prod...
⭐ 1· 1.7k·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: SKILL.md contains curl examples and API docs for api.clawver.store related to artisan sessions, product creation, POD design generation and fulfillment tracking. The single required env var (CLAW_API_KEY) is appropriate for calling the Clawver API; no unrelated credentials, binaries, or config paths are requested.
Instruction Scope
Instructions are focused on interacting with api.clawver.store (artisan sessions, SSE events, product endpoints). They do not instruct reading local files or unrelated environment variables. Minor concern: the documented flows include approving plans and publishing products (server-side actions that may spend credits or make live storefront changes). The SKILL.md shows example PATCH/publish commands but does not enforce an explicit human confirmation step — consumers should ensure the agent asks the user before approving/publishing or spending credits.
Install Mechanism
This is instruction-only with no install specification and no code to download or execute on the host. Lowest-risk install posture: nothing is written to disk by the skill itself.
Credentials
Only CLAW_API_KEY is required and is the declared primary credential. That matches the skill's needs for calling the Clawver API. No additional secrets (Printful keys, cloud credentials, etc.) are requested.
Persistence & Privilege
always:false (not force-included). disable-model-invocation:false (agent may call the skill autonomously), which is the platform default. Combined with the skill's ability to approve plans and publish products, autonomous invocation could result in automated actions that change storefront state or incur costs — recommend gating approval/publish actions or limiting the key's permissions.
Assessment
This skill appears to do what it claims and only needs a Clawver API key. Before installing, confirm: 1) what permissions the CLAW_API_KEY grants — ideally use a limited-scope or test key that cannot charge money or publish live products; 2) whether your agent is allowed to autonomously approve plans or publish (if you want to avoid accidental charges or live changes, require explicit human confirmation for plan approval and publish steps); 3) that you trust api.clawver.store as the target service. Test in a sandbox account first, monitor audit logs, and rotate the key if you stop using the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97579ma8a1md08cwb3nz2gr3d82yhtv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
👕 Clawdis
EnvCLAW_API_KEY
Primary envCLAW_API_KEY