by 安全扫描
OpenClaw
安全
high confidenceThe skill is an instruction-only Etsy pricing advisory that is internally consistent with its description and does not request credentials or privileged access; the only notable external action is an optional npx install command in the README which would fetch remote code if you run it.
评估建议
This skill appears to do what it says: provide strategy and audit-style recommendations for Etsy pricing and related topics. Before you run any install commands from the SKILL.md (the npx line), verify the package/repository (nexscope-ai/eCommerce-Skills) on npm or GitHub, review its source and maintainers, and confirm you trust Nexscope. Do not provide Etsy account credentials or API tokens to the skill — the README says it has no direct Etsy integration and will rely on data you manually suppl...详细分析 ▾
✓ 用途与能力
The name/description (Etsy pricing strategy) matches the content of SKILL.md: guidance, shop audits, prioritised action items, and limitations. The skill does not declare any unrelated environment variables, binaries, or config paths.
ℹ 指令范围
SKILL.md stays within the described advisory scope (analysis, recommendations, implementation plans). It explicitly states it does not perform direct Etsy API integration and asks users to validate recommendations with their shop data. One minor ambiguity: phrases like 'Analyze your current Etsy shop setup' imply the assistant will ask for shop details (manual input) but the instructions do not direct the agent to access any system files, credentials, or external endpoints on its own.
ℹ 安装机制
There is no platform-level install spec, so nothing is automatically written to disk. However, SKILL.md includes an example 'npx skills add nexscope-ai/eCommerce-Skills --skill etsy-pricing-strategy -g' which, if executed by a user, will download and run code from a remote repo/npm/GitHub. That is outside the skill bundle and not executed by the platform; it is a user action and should be vetted before running.
✓ 凭证需求
The skill requires no environment variables, credentials, or special config paths. No secrets are requested or referenced in the instructions, which is appropriate for a strategy/advisory skill that does not integrate directly with Etsy's API.
✓ 持久化与权限
The skill is not marked always:true, does not request persistent system privileges, and does not instruct modifications to other skills or global agent configuration. Autonomous invocation is allowed (platform default) but there are no additional privileges requested.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/14
- Initial release of Etsy Pricing Strategy skill (Beta) - Enables cost calculation, competitor pricing analysis, and sales/coupon guidance for Etsy sellers - Provides actionable recommendations, step-by-step plans, and pro/con tool comparisons - Analyzes shop setup and identifies optimization opportunities - Includes structured output: assessment, action items, tool suggestions, and KPIs to track
● 无害
安装命令
点击复制官方npx clawhub@latest install etsy-pricing-strategy
镜像加速npx clawhub@latest install etsy-pricing-strategy --registry https://cn.longxiaskill.com 镜像可用