← Back to Skills Marketplace
113
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install shopify-ambassador-program
Description
Design and launch a brand ambassador program for Shopify stores to build a network of authentic advocates who drive sales and awareness. Triggers: ambassador...
Usage Guidance
This skill appears to legitimately produce a brand ambassador program blueprint, but the included analyze.sh will run a local 'openclaw' CLI (openclaw agent --local ...) when executed. The manifest does not declare this required binary, so: (1) don't run the script unless you know and trust the openclaw binary on your system; (2) inspect the script (it's plain text) and confirm you are comfortable with it spawning a child process; (3) if you only want the strategy output, ask the author to either (a) include the generated content directly in SKILL.md, (b) update metadata to declare 'openclaw' as a required binary, or (c) remove the nested agent invocation and provide a pure instruction-only version; (4) if you run it, prefer a sandboxed environment and ensure no sensitive credentials are present in that environment.
Capability Analysis
Type: OpenClaw Skill
Name: shopify-ambassador-program
Version: 1.0.0
The skill bundle is classified as suspicious due to a prompt injection vulnerability in analyze.sh. The script takes raw user input and directly incorporates it into a complex prompt for a local OpenClaw agent session without any sanitization or filtering. While the stated purpose of designing Shopify ambassador programs is benign and aligned with the instructions in SKILL.md, this lack of input handling allows for potential agent hijacking. No evidence of intentional malice, such as data exfiltration or backdoors, was found in the code logic.
Capability Assessment
Purpose & Capability
The skill's name, description, and SKILL.md content are coherent with a marketing/strategy helper for Shopify merchants. However, the included analyze.sh invokes a local 'openclaw' CLI which is not listed in the skill's required binaries; requiring a local agent binary to generate the output is unexpected for a content/design skill.
Instruction Scope
SKILL.md itself describes marketing deliverables and does not request secrets or system files. The shipped analyze.sh constructs a prompt and runs 'openclaw agent --local --message ... --session ...', meaning executing the script will spawn a nested local agent process. The script does not read environment variables or external files, and it does not send data to remote endpoints directly, but it does rely on a local binary and will execute a child process.
Install Mechanism
No install spec is present (instruction-only plus a script). Nothing in the manifest downloads or extracts remote code. The only on-disk file is analyze.sh which is readable; risk comes from executing it, not from a remote install step.
Credentials
The skill declares no required environment variables, credentials, or config paths. The script does not reference secrets or external service tokens. That is proportionate to the stated purpose.
Persistence & Privilege
always is false and there are no indications the skill requests persistent system privileges or modifies other skills/config. The only noteworthy behavior is that the script runs a local agent process, but it does not enable permanent presence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shopify-ambassador-program - After installation, invoke the skill by name or use
/shopify-ambassador-program - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release providing a comprehensive brand ambassador program toolkit for Shopify stores:
- Program architecture with tiers, requirements, and identity.
- Recruitment, onboarding, and activation systems for ambassadors.
- Content frameworks, incentive structures, and performance measurement.
- Designed for building, launching, and managing authentic advocate networks.
Metadata
Frequently Asked Questions
What is Shopify Ambassador Program?
Design and launch a brand ambassador program for Shopify stores to build a network of authentic advocates who drive sales and awareness. Triggers: ambassador... It is an AI Agent Skill for Claude Code / OpenClaw, with 113 downloads so far.
How do I install Shopify Ambassador Program?
Run "/install shopify-ambassador-program" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Shopify Ambassador Program free?
Yes, Shopify Ambassador Program is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Shopify Ambassador Program support?
Shopify Ambassador Program is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Shopify Ambassador Program?
It is built and maintained by mguozhen (@mguozhen); the current version is v1.0.0.
More Skills