Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Etsy Pod Automation

v1.0.0

Use when user wants to run Etsy POD store, Printify integration, automate Etsy listings, generate POD designs, manage SEO tags, or schedule social media prom...

0· 63·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill claims to integrate with Printify, Etsy, and multiple social platforms and to run scrapers and image-generation tools. Those capabilities legitimately require API credentials, OAuth flows, and/or additional binaries (scrapers, browser automation, image upscalers). However the registry metadata lists no required environment variables, credentials, or binaries. That discrepancy is incoherent: a Printify/Etsy/social-posting automation should declare at least PRINTIFY_API_TOKEN, ETSY_API_KEY/ETSY_SHOP_ID and social API credentials.
!
Instruction Scope
SKILL.md and references/workflows.md instruct the agent to run trend scrapers (Apify, social scrapers), call Printify and Etsy APIs, generate and upscale images, perform browser automation for Pinterest, and log/store results under project/.cache, assets/, and project/.log. The instructions also tell to store API tokens in a .env file. These are broad operations that access network services and local filesystem paths; the runtime guidance therefore reaches beyond a simple helper and requires explicit credential handling and secure storage practices — none of which are declared in metadata.
Install Mechanism
This is an instruction-only skill with no install spec or code files, which minimizes installer-level risk (nothing will be downloaded or extracted at install time). Note however the instructions refer to scrapers and external tools (Apify, image upscalers, browser automation) which may need to be available in the runtime environment; the skill does not declare these requirements.
!
Credentials
The workflow explicitly references environment secrets and config keys (PRINTIFY_API_TOKEN, ETSY_API_KEY, ETSY_SHOP_ID and unstated social/media API tokens or MCP tooling credentials), but the skill metadata declares no required env vars or a primary credential. Requiring many unrelated secrets without declaring them is disproportionate and opaque. The skill also instructs storing tokens in a .env file — a practice that needs clear guidance on permissions and handling to avoid accidental exposure.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide persistence or modifications to other skills. It does instruct writing to project-local paths (cache, assets, logs). Autonomous invocation is allowed by default (disable-model-invocation=false), which is normal for skills; however combine that with the undisclosed credential needs and automated posting/scraping actions increases potential blast radius.
What to consider before installing
This skill appears to do what it says (automate Printify/Etsy listings, design generation, and social posting), but the packaged metadata omits the many credentials and runtime tool requirements that the instructions explicitly reference. Before installing or running it: 1) Ask the publisher to update the skill metadata to list required env vars (PRINTIFY_API_TOKEN, ETSY_API_KEY, ETSY_SHOP_ID, and any social API tokens or image‑API keys) and declare any required binaries or services (Apify scrapers, browser automation, image upscaling). 2) Confirm how OAuth tokens are obtained and stored — avoid putting long‑lived secrets in .env in source trees; use least‑privilege credentials and a dedicated test shop/account. 3) Review and consent to any automated social posting behavior (it will post on your accounts). 4) Verify scraping behavior complies with target services' Terms of Service and rate limits. 5) If you proceed, run it in an isolated environment with limited credentials and audit logs so you can revoke keys if anything unexpected happens.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cwwqzy597c65zzr2matdexd84s7bk
63downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Etsy POD Automation Skill

Automates the end‑to‑end workflow for running a Print‑on‑Demand dropshipping store on Etsy via Printify.

Triggering Scenarios

  • Run Etsy POD store
  • Integrate Printify for product fulfillment
  • Automate creation and publishing of Etsy listings
  • Generate POD designs with AI
  • Create SEO‑optimized titles and 13 tags for Etsy
  • Schedule social media posts for new listings (Twitter/X, Instagram, Pinterest)
  • Monitor store performance and optimize listings

Overview

  1. Trend Research – Scan Google Trends, Etsy trending searches, Instagram/TikTok for ideas.
  2. Design Generation – Use AI to create designs, export images.
  3. Printify Product Creation – Call Printify API to create product variants, set pricing.
  4. Etsy Listing – Upload images, set title, description, 13 tags, price, shipping.
  5. Social Promotion – Post product mockup with link to Etsy listing.
  6. Performance Monitoring – Track views, orders, SEO ranking, adjust tags/prices.

Core Workflow Summary

Trend → AI Design → Printify API → Etsy API → Social Media → Monitor → Optimize
  • Pricing follows Retail = (Cost+Shipping)/(1‑TargetMargin‑EtsyFeeRate).
  • SEO Tags use the 3‑8 split (3‑4 broad, 8‑9 long‑tail) for a total of 13 tags per product.
  • Photos – Ensure ≥5 photos; generate lifestyle images via image_generate when Printify provides <2 mockups.
  • Automation Schedule – Recommended daily/weekly cron jobs (see references/workflows.md).

Usage Examples

# Create a new Valentine’s mug design
openclaw skill run etsy-pod-automation create-product \
  --trend "valentine heart" \
  --product-type mug \
  --price-margin 0.5

# Publish a new listing and tweet it
openclaw skill run etsy-pod-automation publish-listing \
  --listing-id 12345 \
  --tweet "New Valentine's mug! 🎁"

# Daily trend scan and auto‑create top 3 products
openclaw skill run etsy-pod-automation daily‑auto \
  --platforms twitter,instagram,pinterest

References

  • references/workflows.md – Detailed step‑by‑step API calls, tag algorithm, social media scripts.
  • references/printify-api.md – Printify catalog, variant lookup, product creation.
  • references/seo-tags.md – Tag generation rules and examples.
  • references/social-media.md – Posting commands for X, Instagram, Pinterest.
  • references/performance.md – Monitoring queries and weekly review process.

Created by Simon Cai · More e-commerce skills: github.com/simoncai519/open-accio-skill

Comments

Loading comments...