Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Dropshipping Product Research

v1.0.0

Product research for dropshipping businesses. Identify profitable products with reliable suppliers, healthy margins, and manageable competition. Evaluates sh...

0· 81·1 current·1 all-time
bynexscope-ai@nexscope
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, and supported platforms align with a product-research skill. The skill does not request unrelated credentials or system access in the registry metadata.
Instruction Scope
SKILL.md stays within product-research tasks (ask follow-ups, analyze, produce recommendations). The research step is vague and implicitly expects web-based market data; it does not instruct reading local files or secrets, but allows broad web queries which could fetch arbitrary external data.
!
Install Mechanism
There is no install spec in the registry, yet SKILL.md suggests running `npx skills add nexscope-ai/eCommerce-Skills --skill dropshipping-product-research -g`. That npx command would fetch and run remote code (higher-risk). The registry metadata should declare any install; the mismatch is an incoherence and merits manual review of the external package/repo before running.
Credentials
The skill declares no required environment variables or credentials. This is proportionate to an instruction-only research skill. Note: accessing platform APIs (Amazon, Shopify, etc.) would normally require credentials, but the SKILL.md does not request them.
Persistence & Privilege
always:false and normal invocation settings. The skill does not request persistent system-wide privileges in the registry metadata. The suggested global npx install (if run) could create persistent tooling, so treat that as an operational decision rather than a registry-declared privilege.
What to consider before installing
This appears to be a coherent dropshipping research skill, but take these precautions before installing or running it: - Do not run the npx install command until you verify the package and repository (nexscope-ai/eCommerce-Skills). Inspect the GitHub repo and npm package contents and history. - Prefer to run any untrusted package in a sandbox or container rather than installing globally (-g). - The skill declares no credentials; do not provide API keys or tokens unless you understand why they are needed. If asked later for keys, prefer read-only and short-lived credentials. - Because the SKILL.md's research step is vague, ask the maintainer which public data sources are used (APIs, scraping, third-party services). If you rely on specific data, request transparency about sources and methods. - If you want a safer test, ask the maintainer for a minimal, local-only example or for the code to review before installation. If you want, I can help locate the referenced GitHub repo and list specific files to review or produce a checklist for manual code inspection.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bms5r0nxws8p2ccnbd23w2183jkn0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Dropshipping Product Research 📦

Product research for dropshipping businesses. Identify profitable products with reliable suppliers, healthy margins, and manageable competition. Evaluates shipping times, return risk, and marketing viability.

Supported platforms: Amazon, Shopify, WooCommerce, Walmart, TikTok Shop, Etsy, eBay, BigCommerce.

Built by Nexscope — your AI assistant for smarter e-commerce decisions.

Install

npx skills add nexscope-ai/eCommerce-Skills --skill dropshipping-product-research -g

Usage

Help me find dropshipping products in the pet accessories niche. Budget is $2000 to start. I want to sell via Shopify with Meta ads.

Capabilities

  • Product viability scoring for dropshipping (margin, weight, fragility, return risk)
  • Supplier reliability assessment framework
  • Shipping time and cost analysis by origin/destination
  • Marketing angle identification (social media, paid ads, SEO)
  • Competition analysis specific to dropshipping niches
  • Trend validation and longevity assessment

How This Skill Works

Step 1: Collect information from the user's message — product, platform, current situation, and goals.

Step 2: Ask one follow-up with all remaining questions using multiple-choice format. Allow shorthand answers (e.g., "1b 2c 3a").

Step 3: Research and analyze using the frameworks and methodology below.

Step 4: Deliver structured, actionable output with specific recommendations, not vague advice.

Output Format

  • Start with a summary of findings
  • Include specific data points and benchmarks where available
  • Provide prioritized action items
  • Mark estimates with ⚠️ when based on incomplete data
  • End with concrete next steps

Other Skills

More e-commerce skills: nexscope-ai/eCommerce-Skills

Amazon-specific skills: nexscope-ai/Amazon-Skills

Built by Nexscope — your AI assistant for smarter e-commerce decisions.

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…