Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ecommerce Assistant

v1.0.1

E-commerce product research, competitor analysis, and price monitoring for Amazon, Shopify, and other platforms. Use when researching Amazon product data, an...

0· 120·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lhldolike/ecommerce-assistant.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ecommerce Assistant" (lhldolike/ecommerce-assistant) from ClawHub.
Skill page: https://clawhub.ai/lhldolike/ecommerce-assistant
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ecommerce-assistant

ClawHub CLI

Package manager switcher

npx clawhub@latest install ecommerce-assistant
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with provided scripts (Amazon search, Shopify analysis, price tracking). However SKILL.md and README reference additional scripts (amazon_product.py, product_reporter.py, product_reporter email option) that are not present in the file manifest — this mismatch suggests incomplete packaging or sloppy documentation.
!
Instruction Scope
Runtime instructions tell the user/agent to run included scripts that perform network requests (Shopify product JSON endpoints, arbitrary store domains) and read/write files under the user's home directory (~/.ecommerce-assistant). The instructions also reference external GitHub demo and APIs. The skill's scripts may prompt for user input and will contact remote endpoints; the SKILL.md asks the agent to save/export data and to use APIs but does not show where to safely supply credentials. The missing referenced scripts increase uncertainty about actual runtime behavior.
Install Mechanism
No install spec — instruction-only with bundled scripts. Nothing downloads or extracts arbitrary code at install time from unknown URLs. Risk is limited to running the included scripts.
Credentials
The skill does not request environment variables or credentials in metadata. Scripts accept optional API key arguments (e.g., --api-key) but do not require secrets. There is no evidence of unrelated credential access in code.
Persistence & Privilege
always:false (no forced permanence). Scripts create and write to a per-user data directory (~/.ecommerce-assistant) to store watchlist and price history — this is expected for a tracker but is persistent on the user's machine. The skill does network I/O and can be invoked autonomously by the agent (default), which increases blast radius if misused, but that alone is not flagged as abnormal.
What to consider before installing
Before installing or running this skill: - Note the documentation references files that are missing from the package (amazon_product.py, product_reporter.py). Treat that as a packaging/documentation issue and verify the upstream project (GitHub demo) before running. - The included scripts perform network requests (to Shopify stores, possible APIs) and will create/read/write files under ~/.ecommerce-assistant. If you run them, expect local persistence of watchlists and price history. - The skill does not require environment secrets, but some scripts accept API keys as arguments; do not provide sensitive keys unless you inspect the code and trust the upstream source. - Because the package is instruction-only (no installer) the primary risk is from running the scripts. Review the code (or run in an isolated VM/container) to ensure there are no unexpected network endpoints or data exfiltration. - If you need this functionality but want lower risk, only run the scripts with example/mock data, audit any network calls, and confirm the GitHub demo repo contents match the packaged files.

Like a lobster shell, security has layers — review code before you run it.

latestvk974dj4aqeb63hd2d095904v4983aacs
120downloads
0stars
2versions
Updated 1mo ago
v1.0.1
MIT-0

Ecommerce Assistant

Overview

Research products, analyze competitors, and monitor prices across e-commerce platforms. Supports Amazon product data, Shopify store analysis, and price trend tracking.

Quick Start

📦 GitHub Demo: https://github.com/lhldolike/ecommerce-assistant-demo

Amazon Product Research

# Search Amazon products
python3 scripts/amazon_search.py "wireless headphones" --limit 10

# Get product details
python3 scripts/amazon_product.py B08HMWZBXC

# Track price history
python3 scripts/price_tracker.py --asin B08HMWZBXC --notify

Shopify Store Analysis

# Analyze a Shopify store
python3 scripts/shopify_analyzer.py https://store-name.myshopify.com

# Compare multiple stores
python3 scripts/shopify_analyzer.py --compare store1.com store2.com

Price Monitoring

# Add product to watchlist
python3 scripts/price_tracker.py --add B08HMWZBXC --target-price 50

# Check all tracked products
python3 scripts/price_tracker.py --list

# Generate price report
python3 scripts/price_tracker.py --report weekly

Core Capabilities

1. Product Research

  • Search products by keyword
  • Get detailed product information
  • Analyze reviews and ratings
  • Extract product specifications

2. Competitor Analysis

  • Analyze Shopify store inventory
  • Compare pricing strategies
  • Identify top-selling products
  • Track competitor changes

3. Price Monitoring

  • Track price changes over time
  • Set price drop alerts
  • Generate trend reports
  • Export data to CSV/JSON

4. Market Insights

  • Identify trending products
  • Analyze category performance
  • Find pricing opportunities
  • Generate actionable reports

Data Sources

This skill uses multiple data sources:

  • Amazon: Product Advertising API, public data
  • Shopify: Storefront API (public endpoints)
  • Price Tracking: Historical data aggregation

See references/ for detailed API documentation:

Scripts

All scripts are in scripts/ directory:

  • amazon_search.py - Search Amazon products
  • amazon_product.py - Get product details
  • shopify_analyzer.py - Analyze Shopify stores
  • price_tracker.py - Price monitoring system
  • product_reporter.py - Generate reports

Output Formats

Results can be exported as:

  • JSON (machine-readable)
  • CSV (spreadsheet-friendly)
  • Markdown (human-readable reports)

Limitations

  • Free tier APIs have rate limits (typically 100-500 requests/month)
  • Some Amazon data requires Product Advertising API approval
  • Shopify data limited to public storefront information
  • Price tracking requires periodic execution (not real-time)

Examples

Find Profitable Products

python3 scripts/amazon_search.py "yoga mat" --min-price 20 --max-price 50 --min-rating 4.0

Monitor Competitor Prices

python3 scripts/shopify_analyzer.py https://competitor-store.com --track-prices --output competitor.json

Generate Weekly Report

python3 scripts/product_reporter.py --type weekly --email report@example.com

Comments

Loading comments...