Cn Ecommerce Search

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a disclosed product-search connector, but using it involves running an external npm MCP package and sending product searches or URLs to Shopme.

This skill is coherent for Chinese e-commerce product search and does not show malicious behavior in the provided artifacts. Before installing, be aware that the actual MCP server code comes from an external npm package and that your product searches or URLs may be sent to Shopme's API.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or configuring the skill may execute code from an external npm package that is not visible in the provided artifact set.

Why it was flagged

The skill's setup uses npx to run an npm-hosted MCP server package, while the submitted artifacts include only SKILL.md and no package code or lockfile.

Skill content
"command": "npx", "args": ["-y", "@shopmeagent/cn-ecommerce-search-mcp"]
Recommendation

Only install it if you trust the Shopme npm package and maintainer; consider reviewing or pinning the package version before use in sensitive environments.

What this means

Product keywords, product URLs, or supplier-research queries may be sent to Shopme's service when using the search/detail tools.

Why it was flagged

The documented search and detail tools rely on an external Shopme-backed product database, and SKILL.md also lists the default endpoint as https://api.shopmeagent.com.

Skill content
Search and retrieve product information across 8 Chinese e-commerce platforms via the Shopme unified product database.
Recommendation

Avoid submitting confidential sourcing plans, private product links, or sensitive business research unless you are comfortable sharing those queries with the external provider.