File Integrity Monitoring

Designs tailored file integrity monitoring plans with tamper alerts and recovery procedures for e-commerce sites across major platforms.

Security Scan

This skill is an instruction-only planner that produces file-integrity monitoring (FIM) plans for e-commerce sites; it asks for no credentials, installs nothing, and its requirements are proportionate to its stated purpose.

Purpose & Capability

The name/description (FIM for e-commerce) matches the content: SKILL.md describes generating monitoring plans, detection rules, baselines, and recovery procedures. It does not request unrelated access or credentials. One minor inconsistency: SKILL.md claims an author/site (Nexscope AI) while registry metadata lists source/homepage as unknown/none.

Instruction Scope

Runtime instructions are purely descriptive (generate plans based on user-provided context) and do not instruct the agent to read local files, environment variables, or contact external endpoints. The skill expects user-provided website/server details but does not request or attempt to fetch them itself.

Install Mechanism

There is no install spec and no code files (lowest-risk). The SKILL.md shows a user command 'clawhub install file-integrity-monitoring' but the registry provides no install payload — this is a documentation note rather than a security hazard.

Credentials

The skill declares no required environment variables, credentials, or config paths, which is proportionate for a planner that generates recommendations rather than performing platform API calls or changes.

Persistence & Privilege

The skill is not marked always:true and does not request persistent system privileges. It is user-invocable and allows autonomous invocation by the agent (platform default) but requests no elevated access.

Assessment

This skill is instruction-only and appears to only produce plans and recommendations — it does not install software or ask for credentials. Before using the recommendations in production: (1) verify any platform-specific steps (Shopify/Amazon/etc.) against official vendor documentation, (2) never paste live API keys or admin credentials into prompts, (3) test recommended rules in staging to avoid accidental disruptions, and (4) be aware that the SKILL.md mentions a Nexscope author/site while the registry metadata shows no homepage — if provenance matters to you, ask the publisher for a source or contact info before relying on the output.

AI-powered file integrity monitoring skill for e-commerce websites. Designs file change detection systems, tamper alerts, security baselines, and recovery procedures to protect online stores.

Capabilities

• Generates actionable monitoring & alerts frameworks based on your specific business context
• Works across major e-commerce platforms (Amazon, Shopify, Walmart, WooCommerce, Etsy, TikTok Shop)
• Provides data-driven recommendations with industry benchmarks
• Outputs ready-to-implement plans, not just generic advice

Install

clawhub install file-integrity-monitoring

Usage

Input: Website/server details, critical file paths, security requirements

Output: FIM implementation plan, tamper detection rules, security baseline config, incident recovery procedures

Example Prompt

"I run a [your business type] on [platform]. Help me set up file integrity monitoring for my business. Here's my current situation: [describe context]."

Limitations

• Requires your specific business data for accurate recommendations
• Market benchmarks are based on US/EU data — adjust for other regions
• Recommendations should be validated against your platform's current policies
• Does not replace dedicated monitoring SaaS tools — designs the strategy and framework

---

Built by Nexscope AI — AI-powered e-commerce intelligence.