← Back to Skills Marketplace
Haresh Cart Management
by
Haresh Sainaath S
· GitHub ↗
· v1.0.1
384
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install haresh-cart-management
Description
Manage shopping cart operations via n8n webhook integration
README (SKILL.md)
Cart Management Skill
Purpose
Handles all shopping cart operations including adding items, removing items, and updating quantities.
When to Use
- User wants to add a product to their cart
- User wants to remove an item from cart
- User wants to change item quantity
Supported Actions
Add to Cart
- Extract product_id from user message
- Validate product_id format
- Check quantity (default to 1)
- Call n8n webhook at http://localhost:5678/webhook/cart-add
- Confirm success to user
Remove from Cart
- Extract product_id to remove
- Check current quantity
- If quantity greater than 1, ask user for confirmation
- Call n8n webhook at http://localhost:5678/webhook/cart-remove
- ALWAYS confirm with user before removing
Update Quantity
- Extract product_id and new quantity
- Validate quantity is positive integer
- Call n8n webhook at http://localhost:5678/webhook/cart-update
- Confirm update to user
Safety Rules
- NEVER allow negative quantities
- ALWAYS confirm before removing items
- Validate product_id exists before operations\r
Usage Guidance
This skill looks coherent with its purpose, but it leaves important details unspecified. Before installing: (1) Ensure you actually run n8n at http://localhost:5678 and that the three webhook endpoints exist and are authenticated — otherwise the agent will attempt local HTTP requests that could be abused. (2) Confirm how product_id validation and current-cart checks are implemented (does your n8n workflow perform these checks?), and avoid giving the agent blanket access to external/internal services you don't control. (3) Prefer protecting the webhooks with authentication or a secret token and document expected request/response formats. If you need stronger assurance, run the skill in a sandboxed agent or review/modify the SKILL.md to explicitly call authenticated endpoints and to define where validation and cart-state reads occur.
Capability Analysis
Type: OpenClaw Skill
Name: haresh-cart-management
Version: 1.0.1
The skill instructs the AI agent to make HTTP requests to `http://localhost:5678` for cart management operations via n8n webhooks, as detailed in SKILL.md. This direct access to `localhost` poses a Server-Side Request Forgery (SSRF) risk, potentially allowing the agent to interact with other local services running on the host machine. While the stated purpose is benign, this capability introduces a significant vulnerability for unintended actions or information disclosure if local services are vulnerable or misconfigured.
Capability Assessment
Purpose & Capability
Name/description claim shopping-cart operations via n8n webhooks and the SKILL.md only references calling local n8n webhook endpoints (http://localhost:5678/webhook/...). No unrelated binaries, env vars, or install steps are requested, so required resources are proportionate to the stated purpose.
Instruction Scope
Runtime instructions are limited to extracting product_id/quantity and calling the three localhost webhook endpoints. However, they do not specify how to 'validate product_id exists' or how to 'check current quantity' (e.g., which API or data source to use), which is ambiguous and could lead the agent to probe other services for context. Otherwise the instructions do not direct reading files or exfiltrating data.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded. This is the lowest-risk install profile.
Credentials
No environment variables, credentials, or config paths are requested, which is proportionate for a webhook-based cart skill. The use of localhost endpoints means no external credentials are declared, but those endpoints may rely on local n8n auth which is not described.
Persistence & Privilege
Skill is not always-enabled and does not request persistent privileges or modifications to other skills. Default autonomous invocation is allowed (platform default) but not combined with other concerning flags.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install haresh-cart-management - After installation, invoke the skill by name or use
/haresh-cart-management - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added _meta.json file to the project.
- No other changes to cart management functionality.
v1.0.0
haresh-cart-management 1.0.0
- Initial release of shopping cart management skill.
- Supports adding, removing, and updating item quantities in the cart.
- Integrates with n8n webhooks for cart actions.
- Includes strict safety and validation rules for product IDs and quantities.
Metadata
Frequently Asked Questions
What is Haresh Cart Management?
Manage shopping cart operations via n8n webhook integration. It is an AI Agent Skill for Claude Code / OpenClaw, with 384 downloads so far.
How do I install Haresh Cart Management?
Run "/install haresh-cart-management" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Haresh Cart Management free?
Yes, Haresh Cart Management is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Haresh Cart Management support?
Haresh Cart Management is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Haresh Cart Management?
It is built and maintained by Haresh Sainaath S (@haresh-sai06); the current version is v1.0.1.
More Skills