Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ecomm Ai Voice Agent

Complete AI voice agent system for eCommerce order confirmation, customer support, and outbound campaigns. 12 production-ready n8n workflows with Vapi AI voi...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 267 · 2 current installs · 2 all-time installs
byMuhammad H.M. Alvi@mhmalvi
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, SKILL.md, and the 12 n8n workflow JSON files consistently implement an eCommerce voice/SMS/WhatsApp automation system. The listed env vars (VAPI, TWILIO, WHATSAPP, SHOPIFY, WOOCOMMERCE, Google Sheets IDs, HUBSPOT, etc.) are expected for the stated integrations.
Instruction Scope
Runtime instructions are limited to importing n8n workflows, configuring n8n credentials, and setting environment variables. The workflow nodes only reference declared env vars, call expected provider endpoints (Vapi, Twilio, WhatsApp, Shopify/WooCommerce via update webhook), and write to Google Sheets as described.
Install Mechanism
No install spec or downloadable code is included — this is instruction-only with workflow JSON files. Nothing is written to disk or fetched by the skill itself during install, which reduces risk.
Credentials
A large set of sensitive environment variables is required, but they map to the many external services the workflows integrate with. Two minor points: (1) OPENAI_API_KEY is listed among required envs but its usage isn't visible in the truncated workflows provided — confirm whether OpenAI is actually used and why; (2) ensure credentials (TWILIO_AUTH_HEADER, WOOCOMMERCE_AUTH_HEADER, Google OAuth credential) are scoped to least privilege and dedicated accounts.
Persistence & Privilege
always is false and the skill does not request persistent platform-level privileges. It's an n8n workflow bundle that runs inside the user's n8n instance; no autonomous privileged presence or modifications to other skills are present.
Assessment
This package appears coherent for importing production n8n workflows that coordinate Vapi AI calls, Twilio SMS, WhatsApp, Shopify/WooCommerce, Google Sheets and optional HubSpot/OpenAI. Before installing: (1) review all 12 workflow JSON files (especially the omitted files) to confirm they don't call unexpected external endpoints or include unreviewed webhooks; (2) provision dedicated API credentials with the minimum scope, not your primary account keys; (3) restrict N8N_WEBHOOK_BASE and n8n webhook endpoints behind authentication and/or IP restrictions so public webhooks can't be abused; (4) confirm whether OPENAI_API_KEY is actually required and why (if unused, don't provide it); (5) test in a staging environment to validate flows and billing effects (calls/SMS will incur cost); (6) audit Google Sheets access and remove any unnecessary write privileges; (7) consider data protection (PII in call transcripts) and retention policies. If you want, I can scan the remaining truncated workflow files for additional surprises or produce a checklist of fields to lock down in each service.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.2.2
Download zip
latestvk976wxfczepp6wwjmyta8h6359826tqy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📞 Clawdis
OSLinux · macOS · Windows
EnvVAPI_API_KEY, VAPI_API_URL, VAPI_COD_ASSISTANT_ID, TWILIO_ACCOUNT_SID, TWILIO_PHONE_NUMBER, TWILIO_AUTH_HEADER, TWILIO_API_URL, ECOMM_ORDERS_SHEET_ID, ECOMM_CALL_LOG_SHEET_ID, ECOMM_CUSTOMERS_SHEET_ID, N8N_WEBHOOK_BASE, WHATSAPP_API_URL, WHATSAPP_API_TOKEN, SHOPIFY_STORE_URL, SHOPIFY_ACCESS_TOKEN, WOOCOMMERCE_STORE_URL, WOOCOMMERCE_AUTH_HEADER, HUBSPOT_API_KEY, OPENAI_API_KEY, ECOMM_FROM_EMAIL, ECOMM_OWNER_EMAIL, ECOMM_STAFF_EMAIL, ECOMM_CONFIRM_BASE_URL

SKILL.md

eComm AI Voice Agent 📞

A production-ready, 12-workflow AI voice agent system for eCommerce businesses. Handles order confirmation calls, customer support, returns, retries, and outbound campaigns — fully automated.

Problem

eCommerce businesses (especially COD-heavy markets) lose 20-40% of orders to fake orders, no-shows, and unconfirmed deliveries. Manual confirmation calls are expensive and don't scale.

This system automates the entire confirmation and support lifecycle using AI voice calls.

What's Included

12 Production Workflows

#WorkflowFunction
01Order IntakeWebhook receives new orders, validates, routes by payment type
02COD Confirmation CallAI voice call to confirm cash-on-delivery orders
03Prepaid ConfirmationSMS confirmation + optional high-value voice call
04Call Result HandlerProcesses Vapi callbacks, routes by outcome
05Retry EngineAuto-retries unanswered calls on schedule
06WhatsApp/SMS FallbackMulti-channel fallback for unreachable customers
07Returns & FAQ HandlerIntent-based routing for support queries
08Order Status UpdaterSyncs status back to Shopify/WooCommerce
09CRM & Sheet LoggerCentral event logging + HubSpot sync
10Outbound CampaignProactive engagement for unconfirmed orders
11Daily ReportAutomated metrics email to admin
12Customer CallbackInbound call queue management

Architecture

Shopify/WooCommerce Order
    │
    ▼
Workflow 01: Order Intake & Routing
    │
    ├── COD Order ──► Workflow 02: AI Voice Call
    │                     │
    │                     ▼
    │               Workflow 04: Parse Call Result
    │                     │
    │                     ├── Confirmed → Fulfill
    │                     ├── Declined → Cancel
    │                     └── No Answer → Workflow 05: Retry
    │                                         │
    │                                         └── Max retries → Workflow 06: SMS/WhatsApp
    │
    ├── Prepaid ──► Workflow 03: SMS + Optional Call
    │
    └── All Events ──► Workflow 09: Central Logger
                            │
                            ├── Google Sheets (Orders, Call Log, Customers)
                            └── HubSpot CRM (optional)

Scheduled:
├── Workflow 05: Retry Engine (configurable intervals)
├── Workflow 08: Status Sync (periodic)
├── Workflow 10: Outbound Campaigns (2-hourly, 9AM-7PM)
└── Workflow 11: Daily Report (once daily)

Required n8n Credentials

You must create these credentials in your n8n instance before importing:

Credential TypeUsed ForPlaceholder in JSON
Google Sheets OAuth2Order tracking, call logs, customer CRMYOUR_GOOGLE_SHEETS_CREDENTIAL_ID
SMTP (Gmail or custom)Daily report emailsYOUR_SMTP_CREDENTIAL_ID

All other API keys are configured via n8n environment variables (see below).

Quick Start

1. Prerequisites

  • n8n v2.4+ (self-hosted)
  • Vapi.ai account (AI voice calls)
  • Twilio account (SMS + phone numbers)
  • Google Sheets OAuth2 credentials
  • Shopify or WooCommerce store

2. Environment Variables

# Google Sheets
ECOMM_ORDERS_SHEET_ID=your-sheet-id
ECOMM_CALL_LOG_SHEET_ID=your-sheet-id
ECOMM_CUSTOMERS_SHEET_ID=your-sheet-id

# Vapi AI Voice
VAPI_API_URL=https://api.vapi.ai
VAPI_API_KEY=your-vapi-key
VAPI_COD_ASSISTANT_ID=your-assistant-id

# Twilio
TWILIO_ACCOUNT_SID=your-sid
TWILIO_PHONE_NUMBER=+1234567890
TWILIO_AUTH_HEADER=Basic base64encoded
TWILIO_API_URL=https://api.twilio.com/2010-04-01

# Inter-workflow routing
N8N_WEBHOOK_BASE=https://your-n8n-instance.com/webhook

# Email addresses
ECOMM_FROM_EMAIL=orders@yourbusiness.com
ECOMM_OWNER_EMAIL=owner@yourbusiness.com
ECOMM_STAFF_EMAIL=staff@yourbusiness.com

# Optional
HUBSPOT_API_KEY=your-key
OPENAI_API_KEY=your-key
SHOPIFY_STORE_URL=https://your-store.myshopify.com
SHOPIFY_ACCESS_TOKEN=your-shopify-access-token
WOOCOMMERCE_STORE_URL=https://your-store.com
WOOCOMMERCE_AUTH_HEADER=Basic base64encoded
WHATSAPP_API_URL=https://graph.facebook.com/v17.0/YOUR_PHONE_ID
WHATSAPP_API_TOKEN=your-whatsapp-token
ECOMM_CONFIRM_BASE_URL=https://your-store.com/confirm

3. Sheet Setup

Create 3 Google Sheets with these tabs:

  • Orders: order_id, customer_name, phone, email, amount, payment_type, status, created_at
  • Call Log: call_id, order_id, phone, outcome, transcript, duration, created_at
  • Customers: customer_id, name, phone, email, total_orders, last_order_date

4. Import Workflows

Import all 12 workflow JSON files into n8n. Update webhook paths (all prefixed ecomm-ai/).

5. Configure Vapi Assistant

Create a Vapi assistant for COD confirmation with your business script, voice, and language settings.

Use Cases

  1. COD-heavy eCommerce (South Asia, Middle East, Africa) — Confirm orders before shipping
  2. High-ticket items — Voice confirmation for orders above threshold
  3. Subscription businesses — Renewal confirmation calls
  4. B2B order confirmation — Verify large purchase orders
  5. Appointment businesses — Confirm bookings (dentists, salons, clinics)

Revenue Potential

  • For store owners: Reduce fake orders by 30-50%, saving $1,000-10,000+/month
  • As a service: Charge $500-2,000/month per client for managed voice confirmation
  • Per-call pricing: $0.50-2.00 per successful confirmation call

Customization

  • Voice: Change Vapi assistant for different languages/accents
  • Script: Customize confirmation dialogue in Vapi dashboard
  • Channels: Enable/disable WhatsApp, SMS, Email fallbacks
  • Retry logic: Configure max attempts and intervals
  • Reporting: Customize daily report metrics and recipients

Requirements

  • n8n v2.4+ (self-hosted recommended for webhook reliability)
  • Vapi.ai account ($0.05-0.10 per minute of voice)
  • Twilio account ($0.0075 per SMS)
  • Google Sheets API credentials
  • Shopify/WooCommerce webhook access

Files

14 total
Select a file
Select a file to preview.

Comments

Loading comments…