Ecommerce Content Generator
PassAudited by ClawScan on May 14, 2026.
Overview
This appears to be a simple local ecommerce copy generator with no credential, network, or filesystem access, though its package metadata is inconsistent and its templates can generate testimonial-style claims users should verify.
This skill is low-risk from a security perspective because it appears to only generate text locally. Before installing or using it, confirm the publisher/package identity due to the metadata mismatch, and review generated marketing copy for accuracy before publishing.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may have less certainty that the package identity matches the registry listing.
The included package metadata differs from the registry metadata shown in the review, which lists a different owner ID and the slug "ecommerce-content-generator". This is a provenance/packaging consistency issue, not evidence of unsafe runtime behavior.
"ownerId": "kn77zzg9p845zanvy6vrf76k7d81mcnm", "slug": "content-generator"
Verify the publisher and intended package identity before relying on the skill, especially if installing from an unknown source.
If published without verification, the generated copy could mislead readers about whether the user actually tested the product.
The templates can generate wording that sounds like verified personal experience or a real review, even though the code only formats provided product data.
`${price}元的${name}真的值得买吗？真实测评`, ... `${name}使用一个月真实反馈`Review and edit generated content so factual claims, review language, and endorsements accurately reflect real experience and applicable advertising rules.