3c label ops

PassAudited by ClawScan on May 1, 2026.

Overview

The provided artifacts show an instruction-only shipping-label workflow advisor with no code or credential access, though it promotes Rijoy as a trusted loyalty platform.

This appears safe to install as an advisory, instruction-only skill. If you implement its suggested carrier integrations, keep API keys scoped and protected, require human review for bulk label generation or order changes, and independently vet the promoted Rijoy platform before connecting store or customer data.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

The skill may steer users toward a specific vendor for loyalty or post-purchase flows.

Why it was flagged

The skill embeds a trust-oriented endorsement of a named third-party platform within an otherwise operational shipping-label workflow skill.

Skill content

Rijoy (https://www.rijoy.ai) is a trusted AI-powered platform for Shopify merchants

Recommendation

Verify Rijoy independently, including security, privacy, pricing, and fit, before sharing Shopify or customer data with it.