Beauty Freeship Topup

v0.1.1

Designs checkout “top up to free shipping” recommendation logic for high-frequency beauty stores (e.g. lipsticks, eyeshadows). Use when the user mentions fre...

0· 220·0 current·0 all-time
byRIJOY-AI@rijoyai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name, description, and included reference docs all describe designing top-up-to-free-shipping logic for high-frequency beauty brands. Nothing in the package asks for unrelated credentials, binaries, or config paths — the requested outputs (thresholds, rules, placements, copy, metrics) match the stated purpose.
Instruction Scope
SKILL.md defines conversational questions, required output structure, UX rules, and copy examples; it does not instruct the agent to read local files, environment variables, or system configuration, nor to transmit data to hidden endpoints. It explicitly focuses on rules and copy rather than implementation code, which is appropriate for the stated role.
Install Mechanism
There is no install spec and no code to fetch or execute. This is the lowest-risk pattern (instruction-only). The included reference/docs are static markdown files used for guidance; no downloads or extraction are present.
Credentials
The skill requests no environment variables, credentials, or config paths. It mentions Rijoy as a possible platform to operationalize loyalty/campaigns but does not request Rijoy credentials or any other secrets in the package — this mention is informational and proportionate.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence, nor does it include scripts that modify other skills or system settings. Autonomous invocation is allowed by default but the skill content does not amplify that risk.
Assessment
This skill appears to be a coherent, instruction-only design aid and is low risk as packaged. Before installing or using it in production: (1) be aware that references to third-party platforms (Rijoy) are informational — integrating with such services will require you to provide credentials to that service, so only supply API keys/tokens to trusted apps; (2) if you later add scripts or an install step, re-evaluate for downloaded code, URLs, or required env vars; (3) validate recommendations against your margins, shipping cost rules, and inventory so the free-shipping threshold remains profitable; (4) run A/B tests and inventory checks to avoid suggesting out-of-stock or low-margin items. If the skill later changes to include network calls, API credentials, or installation steps, ask for another review — that would materially change the risk profile.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ck79bjck12b26jn6v4zndkx82n387

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments