KOL Roi
v1.0.0Decode KOL and creator "black box" performance—strip refunds, suspicious traffic, and vanity clicks to estimate each creator's true profit contribution and p...
⭐ 0· 86·0 current·0 all-time
byRIJOY-AI@rijoyai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (KOL ROI, refund and traffic hygiene, renewal recommendations) match the SKILL.md and supporting playbook. The skill only needs order exports, attribution rules, and cost inputs — it does not request unrelated credentials, binaries, or system access.
Instruction Scope
Runtime instructions are constrained to analyzing attributed orders, refund/chargeback logic, traffic-quality heuristics, and producing a fixed five-column renewal ledger plus supporting notes. It asks the agent to read an included playbook file for heuristics and to request missing inputs from the user. Caveat: the skill enforces a strict deliverable format (mandatory table and minimum row counts) and will add labelled illustrative/aggregate rows when fewer creators exist — this can produce placeholders or hypothetical examples if data is missing, so users should expect explicit templates and clearly labelled illustrative rows.
Install Mechanism
No install spec and no code files to execute; everything is instruction-only and included reference docs. This is the lowest-risk install model (nothing written to disk or fetched at install time).
Credentials
The skill requires no environment variables, credentials, or config paths. All data it needs (order exports, attribution rules, refund policies, margin assumptions) are provided interactively by the user or read from the included playbook. No secret or unrelated service access is requested.
Persistence & Privilege
always is false and model invocation is allowed (platform default). The skill does not request permanent presence or system-wide configuration changes. Autonomous invocation combined with this low footprint is not a notable risk here.
Assessment
This skill is instruction-only and internally consistent with its stated purpose: it expects you to paste or upload order/affiliate exports, attribution rules, refund policies, and cost assumptions, and it will produce a strict five-column 'Creator renewal ledger' plus hygiene notes. Before installing or using it: (1) do not paste full customer PII—share only the export columns listed in the playbook (order ID, gross, refunded amount, codes/UTMs, affiliate payout rows). (2) Expect the skill to output templates or labelled illustrative rows if you supply fewer than four creators — verify placeholders are labelled before acting on them. (3) The playbook recommends cautious language around fraud (heuristics, not proof); don't use the output as legal evidence. (4) If a future version adds scripts, network calls, or an install step that downloads code or requires API keys, re-evaluate — that would raise new risks.Like a lobster shell, security has layers — review code before you run it.
latestvk97eqewtnec78skn38n6hcwgzn83gbqb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
