← Back to Skills Marketplace
100
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install shopify-launch-strategy
Description
Build a new product launch playbook for Shopify stores with pre-launch hype, launch day tactics, and post-launch momentum. Triggers: product launch strategy,...
Usage Guidance
This skill appears coherent for generating a Shopify launch playbook, but exercise caution before running the included script. The analyze.sh script invokes an 'openclaw' CLI that is not declared in the manifest — confirm whether that binary exists on your system, where it came from, and what network activity it performs. Inspect the openclaw CLI (or run the script in an isolated/sandbox environment) to ensure prompts are not sent to an unexpected remote endpoint. If you don't want the skill to call a local agent automatically, you can copy the prompt from analyze.sh and run it manually against a model you trust or have verified. If you plan to install/run this skill in production, check the linked GitHub repo for provenance and any additional documentation or release artifacts that explain the openclaw dependency.
Capability Analysis
Type: OpenClaw Skill
Name: shopify-launch-strategy
Version: 1.0.0
The skill contains a shell injection vulnerability in `analyze.sh`. The script takes unsanitized user input via the `${INPUT}` variable and embeds it directly into a double-quoted string (`PROMPT`), which allows for command execution through subshell syntax (e.g., `$(...)` or backticks). While the skill's logic is aligned with its stated purpose of generating Shopify marketing strategies, this lack of input sanitization is a high-risk vulnerability.
Capability Assessment
Purpose & Capability
The name/description (Shopify launch playbook) matches the skill files: SKILL.md describes the deliverables and analyze.sh builds a prompt to produce that content. However, analyze.sh invokes an 'openclaw' CLI to generate the output even though the manifest lists no required binaries. Requiring a local agent binary to produce the content is plausible but the binary is not declared, which is an incoherence (missing declared dependency).
Instruction Scope
SKILL.md and analyze.sh stay within the stated purpose: they construct a detailed prompt for a product launch playbook and do not read or send any local files, environment variables, or unrelated system data. The only runtime action beyond local shell work is calling the 'openclaw' CLI with the prompt, which is consistent with generating model output but may forward the prompt externally depending on that CLI's behavior.
Install Mechanism
There is no install spec and no downloads — this is an instruction-only skill with a single helper script. That's low-risk from an installation perspective. The script will be written to disk when the skill is installed (it already exists in the bundle) but nothing in the manifest will automatically fetch remote code.
Credentials
The skill declares no required environment variables or credentials and the script does not reference env vars or config paths. That aligns with a content-generation playbook. Note: the allowed-tools is Bash, which permits arbitrary shell commands if the agent runs the script, so the runtime environment in which you execute analyze.sh matters.
Persistence & Privilege
The skill is not set to always:true and does not request elevated or persistent system presence. Model invocation is enabled (default), which is normal for skills. There is no evidence the skill modifies other skills or system-wide agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install shopify-launch-strategy - After installation, invoke the skill by name or use
/shopify-launch-strategy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of shopify-launch-strategy skill.
- Provides a comprehensive product launch playbook for Shopify merchants.
- Generates tailored 30-60-90 day launch roadmaps including pre-launch, launch day, and post-launch strategies.
- Delivers email sequences, social media calendars, paid ad plans, and influencer activation.
- Designed for easy usage with product and niche prompts.
Metadata
Frequently Asked Questions
What is Shopify Launch Strategy?
Build a new product launch playbook for Shopify stores with pre-launch hype, launch day tactics, and post-launch momentum. Triggers: product launch strategy,... It is an AI Agent Skill for Claude Code / OpenClaw, with 100 downloads so far.
How do I install Shopify Launch Strategy?
Run "/install shopify-launch-strategy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Shopify Launch Strategy free?
Yes, Shopify Launch Strategy is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Shopify Launch Strategy support?
Shopify Launch Strategy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Shopify Launch Strategy?
It is built and maintained by mguozhen (@mguozhen); the current version is v1.0.0.
More Skills