Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Walmart Review Checker

v0.1.0

Walmart review authenticity analyzer. Detect fake reviews, suspicious patterns, and rating manipulation. Includes WFS verified badge analysis, incentivized r...

0· 108·0 current·0 all-time
byHenk Nie@phheng

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for phheng/walmart-review-checker.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Walmart Review Checker" (phheng/walmart-review-checker) from ClawHub.
Skill page: https://clawhub.ai/phheng/walmart-review-checker
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install walmart-review-checker

ClawHub CLI

Package manager switcher

npx clawhub@latest install walmart-review-checker
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill is advertised as a Walmart review analyzer, but multiple included files and strings refer to Amazon (file headers, 'Amazon Review Checker', ASIN, 'AmazonReviewAuthenticityDetection', report footer). This suggests either copy-paste reuse or mislabeling. The SKILL.md installation example uses an npx command to pull 'nexscope-ai/eCommerce-Skills', but registry metadata lists a different owner slug and there is no homepage/source URL. These inconsistencies make it unclear whether the code matches the claimed Walmart-specific functionality.
Instruction Scope
SKILL.md contains clear runtime instructions to run the bundled Python scripts (e.g., python3 scripts/analyzer.py) and a demo mode; the scripts parse review text and generate an HTML report. The instructions do not ask the agent to read unrelated system files or env vars. One caveat: SKILL.md recommends an npx-based install that would fetch code from a remote package — that network action is outside the local scripts' behavior and should be treated as an additional risk if followed.
Install Mechanism
No official install spec is provided in the package; it's instruction-only plus bundled scripts. However, SKILL.md suggests installing via an npx command (npx skills add nexscope-ai/eCommerce-Skills --skill walmart-review-checker -g), which would fetch code from a remote registry (npm) if executed. Fetching an external package via npx carries the usual supply-chain risks; because there is no homepage or authoritative source listed, that npx recommendation is disproportionate and should be treated cautiously.
Credentials
The skill declares no required environment variables, credentials, or config paths, and the visible code does not reference environment secrets. That level of access is proportionate for a local analysis/reporting tool.
Persistence & Privilege
always:false and default invocation settings mean the skill is not force-included and does not request elevated persistence. The provided scripts produce local output (HTML) and reference a CDN for Chart.js in the generated report; they do not appear to modify other skills or global config.
What to consider before installing
This package looks like a local Python review-analyzer but has red flags: (1) many source strings mention Amazon (ASIN, 'Amazon Review Checker') while the skill is advertised for Walmart — this mismatch could be innocent copy-paste or indicate the wrong code was bundled; (2) SKILL.md suggests installing via npx from 'nexscope-ai/eCommerce-Skills' but the skill metadata lacks a homepage/source and the owner slug is unclear — fetching code from an unknown npm package has supply-chain risk. Before installing or running: verify the publisher on npm (or avoid the npx step and run the included scripts locally), review the full scripts for any network calls or subprocess usage (the visible portions appear local-only), run in an isolated environment (sandbox/container) if you want to test, and prefer to obtain the tool from a trusted source or repository with provenance. If you plan to use it for Walmart-specific signals, validate that the detection logic is actually tailored to Walmart (WFS badges, Walmart IDs) because current files show Amazon terminology (ASIN) which may limit correctness.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b7bbvskyncppsrjyn5m8rp583c25k
108downloads
0stars
1versions
Updated 1mo ago
v0.1.0
MIT-0

Walmart Review Checker 🔍

Review authenticity analyzer for Walmart — detect fake reviews, suspicious patterns, and feedback manipulation.

Installation

npx skills add nexscope-ai/eCommerce-Skills --skill walmart-review-checker -g

Features

  • Authenticity Score — 0-100 comprehensive rating
  • WFS Verified Badge Analysis — Check fulfillment verification patterns
  • Incentivized Review Detection — Identify paid/incentivized reviews
  • Walmart-specific Red Flags — Platform-specific warning signs
  • Progressive Analysis — More data = deeper insights

Walmart-Specific Detection

SignalDescription
WFS BadgeVerified fulfillment patterns
Incentivized"Received free product" indicators
Review timingClustered reviews in short periods
Generic commentsTemplated review patterns

Risk Levels

ScoreLevelDescription
70-100✅ Low RiskReviews appear authentic
50-69⚠️ Medium RiskSome concerns found
30-49🔴 High RiskMultiple red flags
0-29💀 CriticalLikely manipulated reviews

Usage

Paste Reviews

Check these Walmart reviews:

5 stars - Great product, fast shipping from WFS!
5 stars - Exactly as described, love it!
1 star - Arrived damaged.

JSON Input

python3 scripts/analyzer.py '[
  {"content": "Great product!", "rating": 5, "date": "2024-01-15", "wfs_verified": true},
  {"content": "Amazing!", "rating": 5, "date": "2024-01-15", "wfs_verified": false}
]'

Demo Mode

python3 scripts/analyzer.py --demo

Output Example

📊 Walmart Review Authenticity Report

Product: Example Product
Reviews: 25
Analysis Level: L3

━━━━━━━━━━━━━━━━━━━━━━━━

Authenticity Score: 74/100 ✅

Low Risk - Reviews appear authentic.

━━━━━━━━━━━━━━━━━━━━━━━━

Detection Results

✅ Time Clustering: Normal
✅ WFS Verified Ratio: 68% (healthy)
⚠️ Generic Comments: 12%

Part of Nexscope AI — AI tools for e-commerce sellers.

Comments

Loading comments...