Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

E-Commerce Competitor Analysis

v1.0.0

Cross-platform competitor analysis for e-commerce brands. Compare competitors across Amazon, Shopify, social media, and advertising channels. Build a complet...

0· 249·0 current·0 all-time
bynexscope-ai@nexscope

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for nexscope/ecommerce-competitor-analysis.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "E-Commerce Competitor Analysis" (nexscope/ecommerce-competitor-analysis) from ClawHub.
Skill page: https://clawhub.ai/nexscope/ecommerce-competitor-analysis
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ecommerce-competitor-analysis

ClawHub CLI

Package manager switcher

npx clawhub@latest install ecommerce-competitor-analysis
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name, description, and supported-platforms list align with an e‑commerce competitor-analysis skill. However, deep access to some platforms (Shopify stores, Amazon seller dashboards, ad accounts) normally requires API credentials; the skill requests no credentials, which is plausible for surface-level public research but means the skill either only uses public data or relies on the user to supply credentials later. This mismatch is worth noting but not a clear contradiction.
!
Instruction Scope
SKILL.md instructs the agent to 'research and analyze' without specifying allowed sources or collection methods, and includes an explicit shell command (npx skills add nexscope-ai/eCommerce-Skills -g). That command would download and run code from an external package/repo if executed; the instructions give broad discretion on where to gather data, which could lead to unexpected web scraping, API calls, or execution of external code.
!
Install Mechanism
There is no formal install spec in the skill package, but the documentation recommends running an npx install of an external package (nexscope-ai/eCommerce-Skills). Because this package/source is not verified here and no install spec is provided in the registry package, following that command would download/execute third-party code — a higher-risk install pattern if executed blindly.
Credentials
The skill declares no required environment variables or credentials, which is reasonable for a public-data analysis assistant. If a user expects private/account-level analysis (ad accounts, seller consoles), they would likely need to provide credentials later; the SKILL.md does not explain how such secrets would be used or stored.
Persistence & Privilege
The skill does not request always:true or any special persistent privileges. Model invocation is allowed (the platform default). There are no config paths or other system-level modifications declared.
What to consider before installing
This skill appears to be a normal competitor-analysis assistant, but exercise caution before following the embedded install instruction. Do not run the suggested 'npx skills add nexscope-ai/eCommerce-Skills -g' unless you have inspected the npm/GitHub package and trust its publisher: that command will download and run third-party code. Ask the publisher for the package repository URL, review its code, and check npm/github provenance (maintainer, recent commits, issues) before installing. Clarify with the skill author how data will be collected (public web scraping vs. API access) and whether you need to provide any account credentials — never share sensitive keys unless you understand how they will be used and stored. Finally, be aware of platform terms of service for scraping and ad/marketplace data; if you need account-level analysis, prefer official APIs and vetted integrations.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dq197f236d1s9671jq585nd83jw6e
249downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

E-Commerce Competitor Analysis 🔬

Cross-platform competitor analysis for e-commerce brands. Compare competitors across Amazon, Shopify, social media, and advertising channels. Build a complete competitive intelligence picture.

Supported platforms: Amazon, Shopify, WooCommerce, Walmart, TikTok Shop, Etsy, eBay, BigCommerce.

Built by Nexscope — your AI assistant for smarter e-commerce decisions.

Install

npx skills add nexscope-ai/eCommerce-Skills --skill ecommerce-competitor-analysis -g

Usage

Analyze my top 3 competitors in the organic skincare space. They sell on Amazon, Shopify, and Instagram. I need to know their strategy.

Capabilities

  • Multi-channel competitor presence mapping
  • Website and store UX comparison framework
  • Social media strategy analysis (content, engagement, frequency)
  • Ad creative and messaging comparison
  • SEO and content strategy assessment
  • Pricing and positioning matrix across platforms

How This Skill Works

Step 1: Collect information from the user's message — product, platform, current situation, and goals.

Step 2: Ask one follow-up with all remaining questions using multiple-choice format. Allow shorthand answers (e.g., "1b 2c 3a").

Step 3: Research and analyze using the frameworks and methodology below.

Step 4: Deliver structured, actionable output with specific recommendations, not vague advice.

Output Format

  • Start with a summary of findings
  • Include specific data points and benchmarks where available
  • Provide prioritized action items
  • Mark estimates with ⚠️ when based on incomplete data
  • End with concrete next steps

Other Skills

More e-commerce skills: nexscope-ai/eCommerce-Skills

Amazon-specific skills: nexscope-ai/Amazon-Skills

Built by Nexscope — your AI assistant for smarter e-commerce decisions.

Comments

Loading comments...