PrestaShop Bridge V1

Secure skill pack for operating a PrestaShop 9 Bridge through a stable, signed, asynchronous API contract.

Do not install or use this pack until you confirm a few things: 1) The registry/manifest shown to the platform should list the same required environment variables declared inside _meta.json and docs—if the platform shows none, ask the publisher why. 2) Verify the package actually includes .env.bridge.example and examples.http referenced by the validator; those files appear to be missing from the provided manifest. 3) Inspect validators/validate_examples.py: it contains a hard-coded SECRET used to compute example HMACs — treat this as an example secret only and ensure you never deploy or reuse it in production. 4) Confirm the package origin and homepage/source (source is unknown here); prefer packages with a verifiable upstream repo or publisher. 5) If you plan to deploy, ensure secrets (oauth client secret, HMAC secrets, JWT private key, DATABASE_URL, REDIS_DSN) are provided through secure secret storage and not committed. 6) Ask the publisher to fix metadata inconsistencies (registry requirements, included example files) and to remove or clearly label any embedded test secrets before trusting automated agents with these credentials.

Type: OpenClaw Skill Name: prestashop-bridge-v1 Version: 1.0.3 The PrestaShop Bridge V1 skill bundle is a well-structured and security-focused integration for AI agents. It implements robust security measures including OAuth2 (RS256), HMAC-SHA256 request signing, and strict JSON schema validation (additionalProperties: false). The SKILL.md file contains safety-oriented 'Absolute refusal rules' that explicitly prohibit the agent from accessing the filesystem or database directly, ensuring it stays within the defined API boundary. The included validation script (validators/validate_examples.py) and comprehensive documentation demonstrate a high level of engineering rigor without any signs of malicious intent or obfuscation.