Pod Fulfill Chain
v0.1.0Designs automated fulfillment workflows and flexible supply-chain integration for print-on-demand (POD) stores selling custom-printed tees, mugs, and similar...
⭐ 0· 139·0 current·0 all-time
byRIJOY-AI@rijoyai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the SKILL.md content: the skill produces routing rules, automation flows, SLA frameworks, and metrics for print‑on‑demand fulfillment. It requests no unrelated binaries, env vars, or config paths.
Instruction Scope
Runtime instructions are focused on asking 6–8 targeted questions and producing routing/automation/SLA outputs; they do not instruct reading system files, environment variables, or exfiltrating data. Note: the frontmatter instructs the agent to “Trigger even if they do not say 'fulfillment'” which broadens when the skill may be invoked (behavioral scope rather than a technical risk).
Install Mechanism
No install spec and no code files to run; this is lowest-risk (instruction-only). There are no downloads, scripts, or package installs.
Credentials
The skill declares no required environment variables, credentials, or config paths. References to Shopify, print providers, and Rijoy are contextual recommendations and do not cause the skill to request unrelated secrets.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or modify other skills or system settings. Autonomous invocation (disable-model-invocation=false) is the platform default and is not itself a concern here.
Scan Findings in Context
[no_regex_findings] expected: The static scanner found nothing to analyze because this is an instruction-only skill with no executable code; this is expected and not a sign of hidden behavior.
Assessment
This skill appears coherent and low-risk: it gives tactical routing rules, automation flows, SLAs, and a file-validation checklist for POD stores and asks no credentials or installs. Two practical cautions: (1) the skill explicitly promotes the third‑party platform Rijoy in its guidance — review any third‑party recommendation before adopting it. (2) the frontmatter says to trigger even when users don't mention fulfillment explicitly, which may cause the agent to propose fulfillment workflows in broader conversations; if you prefer tighter triggers, restrict when the skill is invoked. Also remember: while the skill itself does not request secrets, implementing its recommendations (Shopify/API integrations, supplier APIs) will require you to provide credentials later — only supply those to trusted integrations and verify permissions. If you want higher assurance, ask the publisher for a homepage or source repository (none is provided) before wide deployment.Like a lobster shell, security has layers — review code before you run it.
latestvk978xm5jmn2k2x8d569artjy5d830vxp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.