ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Shopify Directory

v1.0.0

Discover Shopify merchants by category or store name through Lobster Stores. Use when a buyer wants help finding the right merchant for coffee, cookies, supp...

⭐ 0· 467·0 current·0 all-time
byAdolfo Builes@abuiles

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for abuiles/shopify-directory.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Shopify Directory" (abuiles/shopify-directory) from ClawHub.
Skill page: https://clawhub.ai/abuiles/shopify-directory
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install shopify-directory

ClawHub CLI

Package manager switcher

npx clawhub@latest install shopify-directory
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description match the instructions: the skill only maps buyer intents to a fixed list of Lobster category domains and tells the agent to read those category site skill.md files. No unrelated binaries, credentials, or installs are requested.
ℹ
Instruction Scope
The SKILL.md explicitly instructs the agent to re-fetch and treat remote https://<domain>/skill.md files from the listed Lobster domains as the source of truth and follow their instructions. That is coherent with a directory-style skill, but it means the agent will dynamically execute behavior driven by external text — a supply-chain/execution risk because those remote files could change or contain instructions that go beyond discovery (including asking for data or directing network actions).
✓
Install Mechanism
Instruction-only skill with no install spec, no code files, and no downloads. Nothing is written to disk by the skill package itself.
✓
Credentials
No environment variables, credentials, or config paths are requested. The lack of requested secrets is proportionate to the described directory/discovery function.
✓
Persistence & Privilege
always:false and no claims of modifying other skills or persistent agent configuration. The skill does permit autonomous invocation (platform default) but does not request elevated persistence.
Assessment
This skill is internally consistent and doesn't ask for secrets or install code, but it delegates behavior to external skill.md files on the listed Lobster domains. Before installing, consider whether you trust those domains and the platform's safeguards: remote skill.md content can change and could instruct the agent to perform actions you wouldn't expect. Recommended mitigations: (1) restrict the agent from fetching arbitrary external instructions or require user approval before following external instructions; (2) review the actual content of the listed category skill.md pages to ensure they don't request credentials or ask the agent to transmit user data; (3) ensure the agent never collects payment details in-chat and always hands checkout to the merchant's native Shopify checkout as instructed. If you need higher assurance, request that the skill be converted to a static directory (embedded data) or that the platform sandbox/whitelist remote skill.md sources.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dv3pd4jjskz3g827542dq9x8357yv
467downloads
0stars
1versions
Updated 22h ago
v1.0.0
MIT-0
Adolfo Builes@abuiles
latest
Download

Shopify Skill

Version: 1.0.0 Base URL: https://lobsterstores.com

This skill helps an OpenClaw agent discover the right Shopify merchants for a buyer's category or product need through Lobster Stores.

Use this skill when the goal is to find relevant merchants, narrow the options to the closest category site, and guide the buyer toward a secure purchase on the merchant's native Shopify checkout.

Lobster Stores is an independent directory that aggregates merchants using Shopify. It helps buyers discover relevant stores, but it is not Shopify and it is not the checkout surface.

What this skill does

  • Maps a buyer's request to the closest Shopify merchant category site in the Lobster Stores network
  • Uses the category site as the entrypoint for discovering merchants in that category
  • Keeps checkout outside this skill and returns the final purchase step to the customer on the merchant's native Shopify checkout

Refresh

  • Re-fetch the selected category site's https://<domain>/skill.md when starting a new session or if the deploy may have changed
  • Treat the category site instructions and the selected merchant storefront as the source of truth once a match is found

Discovery

  1. Identify the buyer's category, product type, or store intent
  2. Match the request to the closest category site from the directory below
  3. Tell the agent to read that category site's skill.md and follow the instructions to discover merchants in that category
  4. Hand checkout back to the customer on the selected merchant's native Shopify checkout

Category Directory

  • https://lobsterbread.com/skill.md: bread, bakery, baked goods
  • https://lobsterbrew.com/skill.md: coffee, beans, roasters, brewing gear
  • https://lobstercookies.com/skill.md: cookies, baked goods, sweet treats
  • https://lobstercuts.com/skill.md: meat, butcher, premium cuts
  • https://lobsterfit.com/skill.md: fitness, sports, activewear
  • https://lobsterglow.com/skill.md: beauty, skincare, cosmetics
  • https://lobsterinfuse.com/skill.md: tea, matcha, herbal blends
  • https://lobsterpets.com/skill.md: pet food, pet care, pet accessories
  • https://lobsterpour.com/skill.md: drinks, wine, alcohol
  • https://lobstersaucy.com/skill.md: adult, intimacy, sexual wellness
  • https://lobstersmile.com/skill.md: dental, oral care, whitening
  • https://lobstersnacks.com/skill.md: snacks, packaged food, treats
  • https://lobstersupps.com/skill.md: supplements, vitamins, sports nutrition
  • https://lobsterthread.com/skill.md: apparel, fashion, clothing
  • https://lobsterwell.com/skill.md: wellness, health, self-care

Buyer Guidance

  • Prefer the category site that most closely matches the buyer's product intent
  • Use the category domain as the canonical identifier once a match is found
  • Do not invent merchants or domains that are not in the directory
  • Use wording like Read https://lobsterbrew.com/skill.md and follow the instructions to discover merchants in that category.
  • Do not treat Lobster Stores as the checkout surface or ask the customer for payment details
  • The customer completes the purchase directly on the selected merchant's native Shopify checkout

Examples

  • "Find coffee merchants for me" -> https://lobsterbrew.com/skill.md
  • "Help me buy skincare on Shopify" -> https://lobsterglow.com/skill.md
  • "Which Shopify category handles dental products?" -> https://lobstersmile.com/skill.md
  • "I want to browse supplement merchants" -> https://lobstersupps.com/skill.md
  • "Show me the cookie merchants" -> https://lobstercookies.com/skill.md

Comments

Loading comments...