Ecommerce Marketing Strategy Builder
v0.1.0Full-stack e-commerce marketing strategy builder. Analyzes your product, market, and competitors, then builds a complete omnichannel marketing plan covering...
⭐ 0· 145·0 current·0 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, capabilities, and the SKILL.md all consistently describe generating omnichannel marketing strategies from user-provided product/business info. Nothing requested (no env vars, no binaries, no config paths) is out of scope for that purpose.
Instruction Scope
Runtime instructions are limited to extracting info from the user's prompt, asking a single consolidated follow-up questionnaire, using estimates when needed, and producing plans. The SKILL.md does not instruct the agent to read system files, environment variables, or to exfiltrate data to third parties. It does ask users for competitor names/URLs, which is expected for market research.
Install Mechanism
There is no install spec and no code files (instruction-only), which is low risk. The README includes an example npx install command referencing 'nexscope-ai/eCommerce-Skills' — that is documentation only, not an automated install spec. If a user runs that npx command themselves it would download external code, so users should treat it like any third‑party package install.
Credentials
The skill declares no required environment variables, credentials, or config paths. The SKILL.md also does not instruct the agent to access unrelated secrets or system configuration. Requested user inputs are marketing/business data (price, margin, budget, followers), which are proportionate to the task.
Persistence & Privilege
Flags show no elevated privileges (always: false) and the skill is user-invocable with normal autonomous invocation allowed. It does not request persistent system presence or permission to modify other skills/config; that is proportionate for an instruction-only skill.
Assessment
This skill appears coherent for generating marketing plans and does not ask for system credentials. Before installing or running it: (1) confirm the publisher/source (the package references 'nexscope-ai' but the skill source/homepage are unknown); (2) if you consider running the npx install example, treat it like installing any third‑party package—review the package repo and code first; (3) do not supply sensitive credentials (store admin passwords, API keys) unless you verify the implementation and understand why they are needed; (4) test with non-sensitive example data first and ask the maintainer for a code/repo link if you need greater assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk970rfd7sa9nvfcvtpns3ea1kd83a5bk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.