Ecommerce Content Marketing
v0.1.0E-commerce content marketing strategy planner. Generates content calendars, topic ideas, and platform-specific strategies by analyzing customer reviews, tren...
⭐ 0· 102·0 current·0 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise (content calendars, topic ideas, competitor analysis, customer review mining, SEO) matches the instructions, which direct the agent to perform web searches, analyze public reviews/comments, and produce platform-specific content plans.
Instruction Scope
SKILL.md instructs the agent to perform broad web_search queries across Amazon, Reddit, YouTube, TikTok, Trustpilot, etc., and to ask users for public social handles/URLs. This is appropriate for the stated purpose, but it effectively directs the agent to scrape public content; users should avoid supplying private or credentialed resources (e.g., internal analytics dashboards or account passwords).
Install Mechanism
The registry shows no install spec and the skill is instruction-only (no code files). However, SKILL.md includes an example 'npx skills add nexscope-ai/eCommerce-Skills ...' command — a mild inconsistency. Because no install spec is present in the registry, nothing will be downloaded by the platform, but the README's install instruction could prompt users to run an external npm command outside the registry; treat that command as unrelated unless the publisher is verified.
Credentials
The skill declares no environment variables, no credentials, and SKILL.md states 'No API key required.' That matches the described behavior of using public web searches and user-supplied public handles; there is no disproportionate credential request.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not attempt to modify other skills or system settings. Autonomous invocation is allowed by default but is not a special privilege here.
Assessment
This skill appears to do what it says: analyze public reviews and competitor content to build a content plan, and it asks for public handles/URLs rather than secrets. Before using: (1) Do not paste private credentials, analytics dashboards, or screenshots that require login—only give public URLs/handles. (2) Note the SKILL.md's 'npx' install example is not present in the registry; do not run external npm install commands unless you verify the publisher and review the package code. (3) Be aware the agent will perform web searches/scraping of public content—ensure you have the right to use any scraped content and respect platform terms. If you want higher assurance, ask the publisher for the skill source or request an install spec from a verified package repository.Like a lobster shell, security has layers — review code before you run it.
latestvk976nex825qcb12mcf94m64ned839x7a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.