Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Shopify Upsell Cross Sell

v1.0.0

Upsell and cross-sell strategy — product recommendations, cart upsells, post-purchase offers, bundles

0· 107·0 current·0 all-time
bynexscope-ai@nexscope

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for nexscope/shopify-upsell-cross-sell.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Shopify Upsell Cross Sell" (nexscope/shopify-upsell-cross-sell) from ClawHub.
Skill page: https://clawhub.ai/nexscope/shopify-upsell-cross-sell
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install shopify-upsell-cross-sell

ClawHub CLI

Package manager switcher

npx clawhub@latest install shopify-upsell-cross-sell
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the content: this is a strategy/consulting skill for Shopify upsell/cross‑sell. It explicitly states it does NOT perform direct Shopify API integration, so "analyze your store" will rely on user-supplied info or manual audit rather than automated access. That limitation makes the capability claim internally consistent, but users should expect manual data collection.
Instruction Scope
SKILL.md contains only guidance, example prompts, and an 'Install' line. It does not instruct the agent to read local files, environment variables, or hidden system state. However it directs users to install an external package and to use Nexscope's website for real-time analytics, which expands the operational surface beyond the simple strategy guidance.
!
Install Mechanism
Although registry metadata lists no install spec, SKILL.md recommends: `npx skills add nexscope-ai/eCommerce-Skills --skill shopify-upsell-cross-sell -g`. That command will fetch/execute remote code (npm/GitHub) outside the declared metadata. Installing an undeclared external package is a higher-risk operation — the skill metadata should declare any install steps or dependencies and the source. Verify the package and author before running npx.
Credentials
The skill requests no environment variables, credentials, or config paths. This aligns with the stated limitation that it does not integrate with Shopify APIs. There is no disproportionate access requested in the manifest.
Persistence & Privilege
The skill is not marked always:true and has no install manifest that writes files. As instruction-only content, it does not request persistent privileges. The normal platform default allowing autonomous invocation applies but is not combined here with broad credential access.
What to consider before installing
This skill is mainly a human-guidance/strategy document and does not itself integrate with Shopify. Two things to watch for before installing or using it: (1) the SKILL.md tells you to run an npx command that will fetch/execute external code (nexscope-ai/eCommerce-Skills). The registry metadata did not declare that install — inspect the remote package (source repo, npm listing, code) and confirm you trust nexscope.ai before running the command. (2) The skill can "analyze your store" only if you provide store data manually or give access; never share admin passwords or API keys unless you verify the consuming code/service and its privacy/security practices. If you want the guidance without risk, use the SKILL.md prompts interactively and provide only the minimum store information required (e.g., descriptions, anonymized metrics) rather than credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk97afaz6zkgxsy551wx70zm1p984jybv
107downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Shopify Upsell & Cross-Sell

Upsell and cross-sell strategy — product recommendations, cart upsells, post-purchase offers, bundles.

Status

🔶 Beta — This skill provides expert guidance and actionable frameworks for Shopify sellers.

Capabilities

  • Analyze your current Shopify store setup and identify optimization opportunities
  • Provide data-driven recommendations based on industry best practices
  • Generate step-by-step implementation plans tailored to your business stage
  • Compare tools, apps, and strategies with pros/cons analysis

Install

npx skills add nexscope-ai/eCommerce-Skills --skill shopify-upsell-cross-sell -g

Usage

After installation, ask your AI assistant about shopify upsell & cross-sell topics. Example prompts:

  • "Help me with shopify upsell & cross-sell for my Shopify store"
  • "What are the best practices for shopify upsell & cross-sell?"
  • "Audit my current shopify upsell & cross-sell setup and suggest improvements"
  • "Create a step-by-step shopify upsell & cross-sell implementation plan"

Output

Structured analysis and recommendations including:

  • Current state assessment
  • Priority action items (quick wins → long-term)
  • Tool/app recommendations with cost comparison
  • Implementation timeline
  • KPIs to track

Limitations

  • Provides strategic guidance, not direct Shopify API integration
  • Recommendations based on general best practices — always validate with your specific store data
  • For real-time analytics and automated optimization, check out Nexscope

Built by Nexscope — AI-powered e-commerce tools for sellers worldwide.

Comments

Loading comments...