Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

GEO Visual Content Engine

v3.0.5

Use when the user wants to turn a product and keyword opportunity into AI-generated visuals, structured product data, localized commerce copy, or export-read...

0· 570·1 current·1 all-time
byTim@geo-seo
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md, manifest.json, README, and the src/ modules all describe an e‑commerce asset pipeline (GEO analysis, Nano Banana/Gemini image generation, and optional Shopify/WooCommerce export). Those required credentials (GOOGLE_API_KEY, SHOPIFY_*, WOOCOMMERCE_*) are coherent with that purpose. However, the top-level registry metadata you provided lists 'Required env vars: none' and 'Required binaries: none' while SKILL.md and code clearly expect python3 and several env vars — this mismatch is a packaging/metadata inconsistency that reduces trust.
Instruction Scope
SKILL.md instructs the skill to call Google AI Studio (Nano Banana/Gemini) and optionally publish to Shopify/WooCommerce only when credentials and explicit publish flags are provided; it also instructs saving images to local storage. The instructions do not request unrelated system files or broad context collection. The policy to refuse platform publishing unless explicitly enabled is a good safeguard, but the agent instructions and codebase together can perform network calls and write files — review shopify.py/woocommerce.py for exact API behavior before providing store credentials.
!
Install Mechanism
There is no formal install spec in the registry, but the repo includes a requirements.txt and SKILL.md contains a pip install instruction. The absence of an automated install hook alongside a non-trivial Python codebase is an inconsistency (the skill is not truly instruction‑only). Dependencies include new google-genai / google-generativeai packages (PyPI) which are expected for Gemini integration but should be vetted for provenance. Overall install behavior is moderate risk because code will be installed/executed locally if you follow SKILL.md.
Credentials
Requested environment variables (GOOGLE_API_KEY for image generation; optional Shopify/WooCommerce credentials for publishing) are proportionate to the stated functionality. The main issue is that registry metadata claims no required env vars while SKILL.md and manifest declare several — this mismatch could cause accidental credential exposure if a user trusts the registry summary instead of reading SKILL.md. If you provide store credentials, ensure they are scoped/minimized and only provided when you explicitly enable publish actions.
Persistence & Privilege
The skill does not request always:true and does not declare any agent-level persistent privileges. It can write generated images and export packages to local storage and will perform network requests to image and store APIs when enabled. This is expected for its purpose; combine with least-privilege credentials and explicit opt-in for publishing.
What to consider before installing
This skill appears to implement what it claims (image generation + product-data + optional Shopify/WooCommerce export), but there are packaging and metadata inconsistencies you should address before installing or providing secrets. Steps to reduce risk: - Verify the source repository (SKILL.md points to https://github.com/GEO-SEO/geo-visual-opportunity-engine). Inspect that repo and confirm the code there matches the packaged files and is from a trusted author. - Review src/shopify.py and src/woocommerce.py to confirm what API endpoints are called and what data is sent when publish_to_* is enabled. Ensure no unexpected endpoints or credential exfiltration. - Do not supply production store tokens or high-privilege keys initially: use a test store or read-only/limited-scope token and a throwaway Google API key for testing. - Because there is no automated install spec, if you pip-install the package, do so in an isolated virtualenv or sandbox and review installed PyPI package versions (google-genai/google-generativeai) to confirm provenance. - Consider running the tool with publish flags disabled first to validate analysis and image-generation behavior; only enable direct publishing when you trust the code and have appropriate secrets policy. Confidence is medium because the code and docs mostly align with the claimed purpose, but the mismatches in registry metadata and missing install spec are suspicious and deserve manual review.

Like a lobster shell, security has layers — review code before you run it.

GEOvk9792mvz27e0fdhecmg3jaft8n825exsSEOvk9792mvz27e0fdhecmg3jaft8n825exslatestvk97529ev92fdgy2yh8qnfpng1h82qvh1
570downloads
0stars
11versions
Updated 5h ago
v3.0.5
MIT-0

GEO Visual Opportunity Engine

Use this skill to turn a product and keyword opportunity into AI-generated visuals, structured product data, localized commerce copy, and export-ready commerce assets.

Overview

This skill connects GEO opportunity analysis, image generation, product-data synthesis, localization, and commerce asset preparation in one workflow.

Best For

  • DTC and Shopify teams producing AI-generated product assets at scale
  • commerce operators testing product narratives for search and AI-native discovery
  • agencies managing cross-market visual content and listing workflows
  • teams that want product analysis, visuals, and export-ready assets in one workflow

Start With

Generate AI product visuals and commerce copy for this product opportunity
Run GEO analysis for this product and keyword before generating assets
Create export-ready Shopify or WooCommerce assets for this product

Core Workflow

GEO Visual Opportunity Engine is an AI-powered commerce workflow that can generate product images using Nano Banana 2 (Google Gemini) and prepare platform-ready assets for Shopify or WooCommerce.

External Access And Minimum Credentials

This workflow uses external services. Required credentials depend on the actions you enable:

  • GOOGLE_API_KEY: required for Nano Banana 2 / Gemini image generation
  • SHOPIFY_STORE_URL and SHOPIFY_ACCESS_TOKEN: optional only when exporting directly to Shopify
  • WOOCOMMERCE_STORE_URL, WOOCOMMERCE_CONSUMER_KEY, and WOOCOMMERCE_CONSUMER_SECRET: optional only when exporting directly to WooCommerce
  • python3: required to run the packaged automation code

If store credentials are absent:

  • the skill can stop at opportunity analysis, product data synthesis, image generation, and export packaging
  • do not claim live publishing or platform write access unless the matching credentials are present and the user explicitly requests direct export

Access Policy

Safe default: this skill should stop at analysis, asset generation, product-data output, and export packaging unless direct platform export is explicitly enabled.

  • image generation can run independently of commerce publishing
  • direct Shopify export is optional and must be explicitly enabled
  • direct WooCommerce export is optional and must be explicitly enabled
  • do not claim store write access or completed publication unless the matching credentials are present and direct export is turned on

Features

  • Product Data Synthesis: Auto-generate product titles, descriptions, SKU, prices, inventory
  • AI Image Generation: Automatically calls Nano Banana 2 to generate product images
  • Multi-Platform Support: Prepare assets for Shopify and WooCommerce
  • Three Image Styles: White info, lifestyle, and hero images for each product
  • GEO Opportunity Analysis: Identifies high-priority visual content opportunities

Installation

pip install -r requirements.txt

Quick Start

Basic Usage

from src.main import EcommerceAutomator

# Initialize with API key
automator = EcommerceAutomator(google_api_key="your-google-api-key")

# Run complete workflow - one input to finish everything
result = automator.run_complete_workflow(
    product_input="wireless bluetooth headphones",
    country="us",
    language="en",
    generate_images=True,
    publish_to_shopify=False,
    publish_to_woocommerce=False
)

print(result['product_data']['title'])
print(result['status'])

GEO Analysis Only

from src.main import EcommerceAutomator

automator = EcommerceAutomator()

# Run GEO opportunity analysis
result = automator.run_geo_analysis(
    brand="AcmeWatch",
    product="Acme DivePro 5",
    core_keyword="smartwatch water resistance",
    country="us",
    language="en",
    generate_images=True
)

print(f"Found {len(result['opportunities'])} opportunities")

Create Product Package

from src.main import EcommerceAutomator

automator = EcommerceAutomator(
    google_api_key="your-google-api-key",
    shopify_store_url="your-store.myshopify.com",
    shopify_access_token="your-access-token"
)

# Create a product package and optionally export it
result = automator.create_product(
    product_name="Wireless Bluetooth Headphones Pro",
    category="Electronics",
    base_price=79.99,
    generate_images=True,
    image_style="white_info",
    publish_to_shopify=False,
    publish_to_woocommerce=False
)

API Reference

EcommerceAutomator

Main class for e-commerce automation.

__init__(google_api_key, shopify_store_url, shopify_access_token, woo_store_url, woo_consumer_key, woo_consumer_secret)

Initialize the automator with API credentials.

run_complete_workflow(product_input, country='us', language='en', generate_images=True, publish_to_shopify=False, publish_to_woocommerce=False, output_dir='output')

Unified workflow - One input completes the entire process:

  1. Analyze GEO opportunities
  2. Synthesize product data (title, description, SKU, price)
  3. Generate AI images
  4. Export platform-ready assets or use direct export when explicitly enabled

run_geo_analysis(brand, product, core_keyword, country, language, competitors, platform_focus, generate_images)

Run GEO opportunity analysis with image generation.

create_product(product_name, category, base_price, description, language, target_platforms, generate_images, image_style, publish_to_shopify, publish_to_woocommerce)

Complete e-commerce product creation workflow.

Configuration

Environment Variables

  • GOOGLE_API_KEY - Google API Key for Nano Banana 2 image generation
  • SHOPIFY_STORE_URL - Shopify store URL
  • SHOPIFY_ACCESS_TOKEN - Shopify Admin API access token
  • WOOCOMMERCE_STORE_URL - WooCommerce store URL
  • WOOCOMMERCE_CONSUMER_KEY - WooCommerce API consumer key
  • WOOCOMMERCE_CONSUMER_SECRET - WooCommerce API consumer secret

Image Styles

  • white_info: Clean white background, product-focused infographic
  • lifestyle: Real-world场景 with human interaction, photorealistic
  • hero: Dramatic hero shot with commercial photography quality

Version

3.0.0

Author

Tim (sales@dageno.ai)

Comments

Loading comments...