Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Product Differentiation Tiktok

v0.1.0

TikTok Shop product differentiation strategy tool. Analyze viral product trends, competitor affiliate strategies, content performance, and identify different...

0· 113·0 current·0 all-time
byHenk Nie@phheng

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for phheng/product-differentiation-tiktok.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Product Differentiation Tiktok" (phheng/product-differentiation-tiktok) from ClawHub.
Skill page: https://clawhub.ai/phheng/product-differentiation-tiktok
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install product-differentiation-tiktok

ClawHub CLI

Package manager switcher

npx clawhub@latest install product-differentiation-tiktok
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (TikTok Shop differentiation) matches the included analyzer script logic (review/pattern extraction). However, the skill metadata says 'no required binaries' while SKILL.md instructs running python3 scripts/analyzer.py — the runtime implicitly requires a Python 3 interpreter. Also SKILL.md includes an 'npx skills add' installation command referencing an external npm package that is not declared in the registry install spec, creating a small coherence gap.
Instruction Scope
Runtime instructions are to run the bundled Python analyzer with product/competitor info or interactively. The SKILL.md does not instruct reading unrelated system files or environment variables. That said, the doc is vague about where competitor data (shop IDs, comments, sales data) must come from; the visible portion of analyzer.py implements local NLP on reviews, but the file is truncated — the script may include network/scraping code elsewhere. Because data collection sources are unspecified, it's unclear whether the skill will attempt to fetch data from external endpoints (TikTok or other services) or expects the user to provide all raw data.
Install Mechanism
There is no formal install spec in the registry (instruction-only), which is low risk. However SKILL.md suggests installing via 'npx skills add nexscope-ai/eCommerce-Skills' (an npm package) — that external installer is not declared in the registry metadata. The included Python script means no external fetch is required to run analysis, but the presence of an undocumented npx install command is inconsistent and should be treated with caution.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. The provided SKILL.md also states 'No API key required.' The visible analyzer.py code processes in-memory data and does not reference environment secrets in the shown portion. This is proportionate to the stated offline analysis purpose.
Persistence & Privilege
The skill is not set to always:true and uses default autonomous invocation settings. It does not request persistent system privileges in metadata. Nothing in the provided files indicates it would modify other skills or system-wide agent settings.
What to consider before installing
This skill appears to be a local Python analysis tool and mostly matches its description, but take these precautions before installing or running it: - Inspect the full scripts/analyzer.py file (the provided snippet is truncated) to confirm there are no network calls, hardcoded endpoints, or data-exfiltration logic. Look for imports like requests, urllib, aiohttp, selenium, or subprocess and any code that opens sockets or posts data. - Expect to run python3 — the registry declared no required binaries but the SKILL.md expects Python. Ensure you run it in a controlled environment (container or VM) if you don’t trust the source. - The README suggests an 'npx skills add ...' installer that isn’t declared in the registry. Don’t run that npm command unless you verify the npm package identity and its contents from a trusted source. - If you will feed real competitor/shop IDs or customer comments, confirm whether the tool fetches data automatically (and from where). If it does, ensure credentials or API keys are not needed or are stored securely. - Prefer running the script on sanitized or sample data first. If you’re not comfortable auditing the code, run it in an isolated sandbox and monitor outbound network activity. If you can provide the remainder of analyzer.py, I can re-scan it for network activity, subprocess usage, or hidden endpoints — that would raise confidence and could change the verdict.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d2baspxsv17e9wbmf6v362h83da75
113downloads
0stars
1versions
Updated 1mo ago
v0.1.0
MIT-0

Product Differentiation — TikTok Shop 🎯

Develop winning product differentiation strategies for TikTok Shop.

Installation

npx skills add nexscope-ai/eCommerce-Skills --skill product-differentiation-tiktok -g

Features

  • Competitor Matrix — Side-by-side product comparison
  • Viral Analysis — Trending product patterns
  • Pain Point Mining — Extract issues from reviews/comments
  • USP Extraction — Identify unique selling points
  • Creator Strategy — Affiliate collaboration insights
  • Action Plan — Prioritized improvement roadmap

TikTok-Specific Analysis

DimensionMethodOutput
Viral PotentialTrend analysisVirality score
Content StyleVideo analysisHook patterns
Creator FitNiche matchingIdeal creators
Price Sweet SpotImpulse buy analysisOptimal pricing
Comment SentimentComment NLPPain points

Progressive Analysis Levels

LevelRequired DataUnlocked Analysis
L1 BasicProduct infoBasic comparison
L2 Viral+ Competitor contentViral pattern analysis
L3 Engagement+ Comments/reviewsSentiment analysis
L4 Complete+ Sales dataFull strategy & action plan

Usage

Interactive Mode

python3 scripts/analyzer.py

With Parameters

python3 scripts/analyzer.py '{
  "your_product": "Wireless Earbuds",
  "competitors": ["shop_id_1", "shop_id_2"],
  "category": "Electronics"
}'

Output Example

🎯 TikTok Shop Differentiation Report

Product: Wireless Earbuds
Category: Electronics
Competitors Analyzed: 3

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📊 COMPETITOR COMPARISON

Attribute       | You  | Comp A | Comp B | Comp C
─────────────────────────────────────────────────
Price           | $25  | $20    | $30    | $18
Affiliate Rate  | 15%  | 20%    | 10%    | 25%
Avg Views       | 50K  | 200K   | 30K    | 150K
Engagement      | 5%   | 8%     | 3%     | 7%
Review Score    | 4.5  | 4.2    | 4.6    | 4.0

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

🔥 VIRAL PATTERNS (top performers)

1. Unboxing ASMR hooks
2. "You need this" format
3. Before/after demos
4. Creator authenticity

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

😤 TOP PAIN POINTS (from comments)

1. 🔴 Battery not as claimed (mentioned 45x)
2. 🔴 Sound quality issues (mentioned 32x)
3. 🟡 Shipping delays (mentioned 28x)

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

✨ DIFFERENTIATION OPPORTUNITIES

1. ⭐ Honest battery claims (build trust)
2. ⭐ Sound demo in content
3. ⭐ Fast shipping highlight
4. ⭐ Higher affiliate rate for top creators

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

📋 ACTION PLAN

Priority | Action                    | Impact
─────────────────────────────────────────────
HIGH     | Create ASMR unboxing      | +50% views
HIGH     | Partner with nano-creators | +30% sales
MEDIUM   | Increase affiliate rate   | +20% reach
LOW      | Add comparison content    | +10% CVR

TikTok Strategy Framework

Competitor Product Analysis
      ↓
Viral Content Pattern Mining
      ↓
Comment/Review Sentiment
      ↓
Creator Strategy Development
      ↓
Content Differentiation Plan
      ↓
Action Plan

Part of Nexscope AI — AI tools for e-commerce sellers.

Comments

Loading comments...