Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ecom Seller Profit

v1.0.2

Multi-platform Order Profit Calculator — upload order exports from any e-commerce platform or ERP, get instant profit reports by order, store, SKU, and platf...

0· 95·0 current·0 all-time
byYK-Global@billjamno58

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for billjamno58/ecom-seller-profit.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ecom Seller Profit" (billjamno58/ecom-seller-profit) from ClawHub.
Skill page: https://clawhub.ai/billjamno58/ecom-seller-profit
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ecom-seller-profit

ClawHub CLI

Package manager switcher

npx clawhub@latest install ecom-seller-profit
Security Scan
Capability signals
CryptoCan make purchasesRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (order profit calculator) aligns with the included scripts (analyze_headers.py and parse_orders.py) which parse spreadsheets and compute profit. However, the registry metadata listed no required env vars while SKILL.md and the parser comment both declare billing-related env vars (SKILL_BILLING_API_KEY, SKILL_BILLING_SKILL_ID, FEISHU_USER_ID). That mismatch is an incoherence to ask the author about.
!
Instruction Scope
SKILL.md instructs the agent to run analyze_headers.py to read headers and sample rows and then 'Agent uses its own reasoning to produce the field_map JSON' — which implies sending header + sample data to the model. The README also documents billing via skillpay.me/api/v1/billing/charge and explicitly states FEISHU_USER_ID is transmitted to SkillPay. This means both (a) spreadsheet sample rows/headers may be sent to an LLM (potentially exposing sensitive data) and (b) a user identifier and billing credentials will be sent to an external service. These behaviors go beyond simple local parsing and should be confirmed.
Install Mechanism
No install spec or external downloads are present; this is an instruction-only skill with local Python scripts included. No third-party packages are fetched by an installer. Risk from installation is low, but runtime network activity is possible and needs review.
!
Credentials
The SKILL.md and parse_orders.py declare three sensitive env vars for billing (SKILL_BILLING_API_KEY, SKILL_BILLING_SKILL_ID, FEISHU_USER_ID). These are reasonable for a paid skill, but the registry metadata lists no required env vars — an inconsistency that could mislead users. Also FEISHU_USER_ID is a personal identifier that will be transmitted externally per the docs; ensure you consent to that sharing. No unrelated cloud credentials are requested.
Persistence & Privilege
The skill does not request always:true and does not claim to modify other skills or system-wide settings. It appears to run as a normal, user-invoked skill with no special persistent privileges.
What to consider before installing
Before installing or running this skill: 1) Confirm the billing behavior — SKILL.md says it will call skillpay.me/api/v1/billing/charge and send your FEISHU_USER_ID; only provide SKILL_BILLING_API_KEY/SKILL_BILLING_SKILL_ID if you accept that. 2) Resolve the metadata mismatch: the registry claims no env vars but the docs/code require billing credentials — ask the author why. 3) Inspect the full parse_orders.py for any network requests (billing or other endpoints) and what data is sent; run it in an isolated environment first. 4) Avoid uploading spreadsheets that contain sensitive PII until you are sure the agent/model will not forward row or header data to remote services. 5) If you want to minimize data exposure, run the scripts locally (without sending header/sample data to remote LLMs) or request an offline/local-only mode from the author. If you cannot validate these points, treat the skill cautiously.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f51e6yexq516qvvn3jcz3tn85gd17
95downloads
0stars
3versions
Updated 3d ago
v1.0.2
MIT-0

Seller Profit Calculator

Upload order exports from any e-commerce platform or ERP → get instant profit breakdown by order, store, SKU, and platform.

Slug: ecom-seller-profit Price: $0.01 USDT per call Author: 91Skillhub Team


What It Does

Upload one Excel file → get a complete profit breakdown:

  • 📋 Overall summary: total orders, completed, cancelled, total revenue, total cost, net profit, net margin %
  • 🌍 By platform: revenue / expense / cost / profit per platform
  • 🏪 By store: revenue / expense / cost / profit per store
  • 🔴 Bottom 5 orders: worst loss-making orders highlighted
  • 🟢 Top 5 orders: best performing orders highlighted

How It Works

You upload any Excel order export
        ↓
Agent reads headers + sample rows (analyze_headers.py)
        ↓
Agent identifies each column's meaning (LLM reasoning)
        ↓
Agent builds field_map JSON → passes to parse_orders.py
        ↓
parse_orders.py calculates with full field context
        ↓
Report with per-order breakdown + accuracy notes

CLI Usage

# Auto-detect format
python3 scripts/parse_orders.py orders.xlsx

# With field mapping
python3 scripts/parse_orders.py orders.xlsx --field-map @my_mapping.json

# Output JSON
python3 scripts/parse_orders.py orders.xlsx --json result.json

# Markdown report
python3 scripts/parse_orders.py orders.xlsx --markdown report.md

Supported Platforms

All e-commerce platforms and ERPs that export order data with standard fields.

PlatformStatus
TikTok Shop✅ Verified
Allegro✅ Verified
Temu Half-Hosted✅ Verified
SHEIN✅ Verified
Fruugo✅ Verified
Amazon✅ Compatible
Shopee / Lazada✅ Compatible
Ozon✅ Compatible
Walmart / eBay✅ Compatible
Other platforms✅ Generic

Supported File Formats

  • Excel: .xlsx, .xls
  • CSV: .csv

Calculation Logic

Net Profit = Platform Revenue - Platform Expense - Order Cost
ModuleDescription
Platform IncomeTransaction + shipping income + refunds + subsidies
Platform ExpenseCommission + tech fees + shipping + refunds + fines + taxes
Order CostPurchase cost + first-leg freight + last-mile shipping + packaging + warehouse + advertising

Tiered Features

FeatureFREEPRO
Multi-platform support
Header auto-detection
Per-order profit calculation
By-store / by-platform breakdown
Top/bottom 5 orders
Markdown report
JSON export
Custom field mapping
Priority support

Billing

This skill charges $0.01 USDT per execution via SkillPay.me.

  • Billing is processed on each run via skillpay.me/api/v1/billing/charge
  • Your user ID (FEISHU_USER_ID) is transmitted to SkillPay for billing identification
  • When balance is insufficient, the system returns a payment link for top-up

Required environment variables:

VariableDescription
SKILL_BILLING_API_KEYSkillPay Builder API Key
SKILL_BILLING_SKILL_IDSkillPay Skill ID
FEISHU_USER_IDUser ID for billing

File Structure

seller-profit-calculator/
├── SKILL.md
└── scripts/
    ├── parse_orders.py      # Core parser + billing
    └── analyze_headers.py   # Header analyzer

Limitations

  • CSV support: in v2.0 roadmap
  • Settlement report: in v2.0 roadmap
  • Per-order profit is precise; platform-level aggregation may have minor variance due to internal settlement adjustments

License

MIT

Comments

Loading comments...