Brand Protection Shopify

Shopify/DTC brand protection toolkit. Detect counterfeit stores, unauthorized resellers, and trademark violations. Includes DMCA takedown templates, domain m...

Security Scan

The skill's code and instructions are generally consistent with a brand‑protection toolkit, but there are notable mismatches between the declared Shopify/DTC purpose and the actual Amazon/ASIN‑focused code and templates, plus minor inconsistencies in how the skill is distributed—these discrepancies deserve clarification before installing.

Purpose & Capability

The skill is named and described as 'Shopify/DTC' brand protection, but the included scripts and templates are heavily Amazon‑centric (ASINs, Amazon Brand Registry, Brand Registry portal, Amazon-specific complaint steps). That mismatch (Shopify vs Amazon) is unexpected and suggests the package may not do what the name/description promise or may be repurposed from an Amazon tool.

Instruction Scope

SKILL.md tells the agent/user to run local Python scripts and shows an npx install command, but there is no install spec in the registry entry. The runtime instructions include test‑buy guidance and evidence collection (normal for brand protection) but do not document any network endpoints or credential use. The mismatch between installation guidance (npx) and the registry's 'no install spec' is inconsistent and should be clarified.

Install Mechanism

There is no formal install spec in the registry (instruction‑only), but SKILL.md suggests an npx command to add a package from 'nexscope-ai/eCommerce-Skills'. That is not enforced by the registry metadata and the skill currently includes Python scripts only. This is not inherently dangerous, but it's inconsistent and you should confirm the intended distribution method and package source (npm package vs direct code).

Credentials

The skill requests no environment variables, no credentials, and requires only standard Python modules visible in the files. The inputs SKILL.md asks for (brand name, trademark number, logo URL, social handles) are appropriate and not secret. No evidence of requests for unrelated credentials was found in the visible code.

Persistence & Privilege

The skill does not request persistent presence (always=false) and contains no install scripts or modifications to other skills or system-wide settings. Running the included Python scripts is a local, non‑privileged action.

What to consider before installing

Before installing or running this skill: (1) Clarify scope — the name/description say 'Shopify/DTC' but the code and templates reference Amazon (ASINs, Brand Registry). Ask the publisher which platforms are supported. (2) Confirm distribution — SKILL.md shows an npx install command but the registry entry has no install spec or homepage; verify the trusted source (npm package, GitHub repo, or official site) before running any install commands. (3) Inspect the full scripts for network calls or credential use (the provided snippets are local-processing and templates but portions were truncated); if network requests exist, verify endpoints and whether any secrets are transmitted. (4) Test in an isolated environment (non‑production machine) and review logs and outbound network traffic if you plan to run it on sensitive systems. (5) If you need Shopify‑specific workflows, ask for confirmation or a Shopify mode; otherwise expect Amazon‑focused behavior. If the publisher cannot explain these inconsistencies, treat the package as untrusted.

Brand Protection — Shopify/DTC 🛡️

Protect your brand from counterfeit stores and unauthorized resellers in the DTC space.

Installation

npx skills add nexscope-ai/eCommerce-Skills --skill brand-protection-shopify -g

Features

• Counterfeit Store Detection — Find fake stores copying your brand
• Domain Monitoring — Track similar/typosquatting domains
• Social Media Infringement — Detect unauthorized ads/posts
• Trademark Abuse — Logo and brand name misuse
• DMCA Takedown Templates — Copyright infringement removal
• Cease & Desist Letters — Legal notice templates

DTC-Specific Detection

Dimension	Method	Risk Level
Fake Stores	Domain + content matching	🔴 High
Unauthorized Resellers	Price/image tracking	🔴 High
Social Ads	Ad library monitoring	⚠️ Medium
Trademark	Logo/name detection	🔴 High

Risk Levels

Level	Description	Action
🔴 High	Active infringement	DMCA within 24h
⚠️ Medium	Potential concern	Investigate further
✅ Low	Normal activity	Continue monitoring

Input Configuration

{
  "brand_name": "YourBrand",
  "official_domain": "yourbrand.com",
  "trademark_number": "US12345678",
  "logo_url": "https://yourbrand.com/logo.png",
  "social_handles": {
    "instagram": "@yourbrand",
    "facebook": "yourbrand",
    "tiktok": "@yourbrand"
  }
}

Usage

Detection

python3 scripts/detector.py

Generate Takedown Templates

# DMCA takedown
python3 scripts/templates.py dmca

# Cease & Desist letter
python3 scripts/templates.py cease-desist

# Platform report (Shopify)
python3 scripts/templates.py platform-report

Output Example

🛡️ Shopify/DTC Brand Protection Report

Brand: YourBrand
Official Domain: yourbrand.com
Analysis Date: 2024-01-15

━━━━━━━━━━━━━━━━━━━━━━━━

🔴 HIGH RISK ALERTS

Fake Store Detected:
├── Domain: your-brand-sale.com
├── Copying: Product images, descriptions
└── Action: File DMCA + domain complaint

━━━━━━━━━━━━━━━━━━━━━━━━

⚠️ SOCIAL MEDIA INFRINGEMENT

Instagram: 2 unauthorized ads detected
Facebook: 1 fake page found
Recommendation: Report to platforms

Takedown Templates Included

Template	Use Case
DMCA Takedown	Hosting provider removal
Cease & Desist	Direct legal notice
Platform Report	Shopify abuse report
Social Report	Instagram/Facebook/TikTok
Domain Complaint	Registrar abuse report

Action Workflow

Monitor Web/Social
      ↓
Detect Infringement
      ↓
Document Evidence
      ↓
Send DMCA/C&D
      ↓
Report to Platforms
      ↓
Track Resolution

---

Part of Nexscope AI — AI tools for e-commerce sellers.