by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated purpose (shopify landing-page strategy) is plausible and most files match that purpose, but the provided shell script invokes a local 'openclaw agent' binary that is not declared in the skill metadata and could cause broader agent behavior or access to host context—this discrepancy warrants caution before installing or running.
评估建议
This skill appears to do what it says (generate landing-page strategy and copy), but exercise caution: the included analyze.sh runs 'openclaw agent --local --message ...' even though the skill metadata does not declare that binary as required. Before running or installing, verify what the local 'openclaw agent' CLI does on your system (does it send data to a remote service, include local files, or use stored credentials?). If you don't want a local agent run, open and review analyze.sh and eithe...详细分析 ▾
ℹ 用途与能力
The SKILL.md and analyze.sh both describe producing landing-page strategy and copy frameworks, which is coherent with the skill name/description. However, the included analyze.sh invokes a local 'openclaw agent' binary to process the prompt; the skill metadata lists no required binaries. The need for a local agent binary is plausible but should have been declared.
ℹ 指令范围
The runtime instructions and script are narrowly focused on producing CRO deliverables and do not directly read user files or request credentials. But the script executes 'openclaw agent --local ...' — that local agent process may itself attach additional context, system data, or credentials depending on the user's agent installation and configuration. The SKILL.md does not warn about that or constrain what the local agent may include in its context.
✓ 安装机制
There is no install spec (instruction-only skill with one helper script). Nothing is downloaded or written to disk by an installer step beyond the existing files in the skill bundle.
ℹ 凭证需求
The skill declares no required environment variables or credentials, which matches the high-level purpose. However, the script's invocation of the 'openclaw agent' binary is an implicit dependency; that binary may rely on the user's global configuration or stored credentials (not declared here). The skill does not document or limit what the invoked agent will access.
✓ 持久化与权限
The skill is not marked 'always' and is user-invocable only by default. It does not request persistent system-wide changes or modify other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/27
- Initial release of the Shopify High-Converting Landing Page Builder skill. - Generate landing page wireframes, copy frameworks, CTA hierarchies, and A/B testing plans for Shopify stores. - Supports strategies for product launches, ad campaigns, and sales events. - Includes features for page architecture, copywriting, social proof, CTA optimization, mobile-first design, technical SEO, and testing guidelines.
● 无害
安装命令
点击复制官方npx clawhub@latest install shopify-landing-page-builder
镜像加速npx clawhub@latest install shopify-landing-page-builder --registry https://cn.longxiaskill.com