安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill appears to be a placeholder that is 'under maintenance.' The main red flag is an internal inconsistency: SKILL.md says a Maton API key and network access are required, but the registry declares no required credentials. Before installing or enabling it:
- Don't supply any API keys or tokens to this skill until the developer clarifies what credentials are needed and why.
- Ask the publisher to update the registry metadata to list any required env vars (e.g., MATON_API_KEY) or remove ...详细分析 ▾
⚠ 用途与能力
The SKILL.md header states 'Requires network access and valid Maton API key', but the registry metadata lists no required environment variables or primary credential. Either the skill omitted declaring a needed credential, or the compatibility note is stale; both are coherent problems for a service integration.
✓ 指令范围
The runtime instructions are short and limited: they only say the integration is under maintenance and direct users to contact an email, visit the website, or use alternatives. There are no instructions to read files, access unrelated environment variables, or transmit user data.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files. No downloads or package installs are requested, which minimizes on-disk code risk.
⚠ 凭证需求
The SKILL.md claims a 'valid Maton API key' is required, but requires.env/primaryCredential are empty in the registry. That mismatch could indicate missing declared credentials (which would be expected for a Shopify integration) or stale documentation. If the skill actually expects an API key, the registry should declare it so users know what secrets they'd provide.
✓ 持久化与权限
The skill is not marked always:true and does not request system-wide config or modify other skills. Autonomous invocation is allowed (the platform default) but there are no other elevated privileges.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install shopify
镜像加速npx clawhub@latest install shopify --registry https://cn.longxiaskill.com