← Back to Skills Marketplace
PPSPY: Shopify spy for dropshipping & shopify sales tracker tool
by
fanyanggod
· GitHub ↗
· v1.0.3
· MIT-0
226
Downloads
1
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install ppspy
Description
Search and analyze Shopify stores, Facebook ads, ad monitoring, and sales tracking using PPSPY e-commerce intelligence API. Find winning products, spy on com...
Usage Guidance
This skill appears to do what it claims, but it installs and runs a third‑party npm package (ppspy-mcp-server) on your machine and will use your PPSPY_API_KEY. Before installing: 1) verify the npm package and its publisher (review source code on GitHub or the package page), 2) avoid global installs if you can—use a container, VM, or a non-global virtual environment, 3) limit and monitor the API key (use a key with least privilege and rotate it if needed), and 4) review network/egress controls if you are concerned about a background process communicating externally.
Capability Analysis
Type: OpenClaw Skill
Name: ppspy
Version: 1.0.3
The ppspy skill bundle provides a comprehensive interface for e-commerce intelligence, allowing users to analyze Shopify stores and Facebook ads via the PPSPY API. It installs the legitimate-looking 'ppspy-mcp-server' package from npm and requires a standard API key (PPSPY_API_KEY) for operation. No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
Name/description match the resources required: PPSPY_API_KEY is the primary credential and npm is required to install the ppspy MCP server that exposes the listed tools. The requested items are coherent with an integration to the PPSPY API.
Instruction Scope
SKILL.md stays within the skill's stated purpose: it instructs the user/agent to set PPSPY_API_KEY and to install/run ppspy-mcp-server. It does not ask the agent to read unrelated files or other credentials.
Install Mechanism
Installation is via npm install -g [email protected] (a third‑party package from the npm registry). This is a normal distribution method but means arbitrary code from that package will be written to and executed on the host — a moderate installation risk that warrants inspection of the package source or running it in an isolated environment.
Credentials
Only PPSPY_API_KEY is required and is the declared primary credential; that is appropriate for an API-backed spy/tracking tool. No unrelated secrets or config paths are requested.
Persistence & Privilege
The skill does not force installation (always:false) but the MCP server will be run by the agent when invoked. That gives the skill a local process that can access the network and the provided API key — consider the elevated runtime surface that creates.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ppspy - After installation, invoke the skill by name or use
/ppspy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Clarified setup instructions to distinguish the main PPSPY website and the direct API site for account management.
- Added guidance to visit api.ppspy.com specifically for API keys and billing.
- No changes to features or available tools.
v1.0.2
- Changed CLI command requirements from npx to npm, with global installation of ppspy-mcp-server.
- Updated server launch to use the ppspy-mcp-server binary directly instead of npx.
- Added an explicit install step in the metadata for npm global install.
- No changes to the user-facing toolset or features.
v1.0.1
- Updated dependency to use [email protected].
- No changes to features, tools, or interface.
- All usage and setup instructions remain the same.
v1.0.0
ppspy 1.0.0
- Initial release of the PPSPY e-commerce intelligence skill.
- Search and analyze Shopify stores, Facebook ads, ad campaigns, and sales using the PPSPY API.
- Includes 58 tools for store analysis, product tracking, ad intelligence, ad/sales monitoring, and data enrichment.
- Requires a PPSPY API key for use.
- Credit usage details provided for each type of query.
Metadata
Frequently Asked Questions
What is PPSPY: Shopify spy for dropshipping & shopify sales tracker tool?
Search and analyze Shopify stores, Facebook ads, ad monitoring, and sales tracking using PPSPY e-commerce intelligence API. Find winning products, spy on com... It is an AI Agent Skill for Claude Code / OpenClaw, with 226 downloads so far.
How do I install PPSPY: Shopify spy for dropshipping & shopify sales tracker tool?
Run "/install ppspy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is PPSPY: Shopify spy for dropshipping & shopify sales tracker tool free?
Yes, PPSPY: Shopify spy for dropshipping & shopify sales tracker tool is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does PPSPY: Shopify spy for dropshipping & shopify sales tracker tool support?
PPSPY: Shopify spy for dropshipping & shopify sales tracker tool is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created PPSPY: Shopify spy for dropshipping & shopify sales tracker tool?
It is built and maintained by fanyanggod (@fanyanggod); the current version is v1.0.3.
More Skills