by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only Etsy launch guide and its requirements align with that purpose; the only minor note is that the README recommends an npx install from an external npm package which the registry metadata does not declare.
评估建议
This is an instruction-only Etsy shop guide and appears internally consistent. Before following the SKILL.md's npm install command, verify the npm package (nexscope-ai/eCommerce-Skills) and the publisher (Nexscope) on the npm registry and their website. If you install code from npm, prefer running it in a controlled environment and avoid providing Etsy credentials or other secrets to the skill—this guide is intended for strategy and does not perform API integrations. If you want automated access...详细分析 ▾
✓ 用途与能力
Name and description (Etsy shop launch guide) match the SKILL.md content: strategic guidance, checklists, and recommendations. The skill does not request unrelated credentials, binaries, or config paths.
✓ 指令范围
SKILL.md contains only user-facing guidance and example prompts; it explicitly states there is no direct Etsy API integration. It does not instruct reading local files, environment variables, or exfiltrating data.
ℹ 安装机制
There is no formal install spec in the registry metadata (instruction-only), but SKILL.md includes an Install command: `npx skills add nexscope-ai/eCommerce-Skills --skill etsy-shop-setup -g`. That command would fetch code from npm when run by a user; the package origin and trustworthiness are not declared here. This is not inherently malicious, but users should verify the npm package and publisher before running.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. That is proportionate for a strategy/consulting guide that does not integrate with Etsy's API.
✓ 持久化与权限
Skill does not request persistent presence (always: false) and does not ask to modify other skills or system settings. Autonomous invocation is allowed by platform default but not combined with other red flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/14
Initial release: expert guidance for setting up and optimizing your Etsy shop. - Provides analysis of your shop setup and identifies areas for improvement - Generates tailored implementation plans and prioritized action items - Offers data-driven best practices and tool recommendations - Delivers structured output with assessments, timelines, and KPIs to track progress - No direct Etsy API integration; guidance is based on general best practices
● 无害
安装命令
点击复制官方npx clawhub@latest install etsy-shop-setup
镜像加速npx clawhub@latest install etsy-shop-setup --registry https://cn.longxiaskill.com