← Back to Skills Marketplace
competitive-intel
by
Meir Kadosh
· GitHub ↗
· v1.0.0
· MIT-0
105
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install market-intel
Description
Real-time competitive intelligence and market research using Bright Data's web scraping infrastructure. Analyzes competitors' pricing, features, reviews, hir...
Usage Guidance
This skill tells the agent to install and run Bright Data's CLI and to execute many shell commands, but it does not declare that credentials or helper tools are needed — that mismatch is concerning. Before installing or enabling this skill: 1) Don't run the curl | bash installer blindly — review the installer script and prefer manual installation or a verified release (checksums/pinned versions). 2) Confirm how Bright Data authentication will be provided and where sensitive tokens will be stored; the skill omits any env vars or config paths. 3) If you allow the agent to run this, sandbox it (restricted account/container) because the agent will perform network I/O and write files. 4) Verify availability of required CLI utilities (jq, xargs) and whether running 'bdata login' requires interactive credentials you are comfortable providing. 5) Consider using a human-in-the-loop for initial runs to confirm commands and outputs, or ask the skill author to update metadata to declare required binaries and credentials and to provide safer install instructions (pinned releases, checksum verification).
Capability Analysis
Type: OpenClaw Skill
Name: market-intel
Version: 1.0.0
The market-intel skill bundle provides a comprehensive framework for competitive research using the Bright Data CLI (bdata). It is classified as suspicious primarily due to the inclusion of a 'curl | bash' installation command in SKILL.md, which is a high-risk execution pattern that could be exploited if the remote source is compromised. While the skill's shell and network capabilities are plausibly required for its stated purpose of web scraping and market analysis, the combination of automated shell execution and broad scraping functionality (as detailed in references/data-source-guide.md) represents a significant risk profile. No evidence of intentional malice, such as credential theft or unauthorized data exfiltration, was found.
Capability Assessment
Purpose & Capability
The skill's stated purpose (competitive intelligence via Bright Data) matches use of a web-scraping CLI, but the metadata claims no required binaries or credentials while the SKILL.md explicitly requires installing and running the Bright Data CLI and using tools like jq/xargs. Declaring 'no env vars / no API keys' contradicts the practical need for Bright Data authentication and any platform credentials.
Instruction Scope
Runtime instructions direct the agent to run remote installer (curl | bash), run bdata commands (search, scrape, pipelines), parallelize shell calls, pipe outputs to jq/xargs, and write output files. The instructions assume access to system shell, network, and interactive login (bdata login) but do not declare where credentials come from, nor do they declare required binaries like jq. The instructions also explicitly tell the agent to run arbitrary network calls and collect wide-ranging web data — which is expected for this skill but the missing credential handling and broad file/command usage are scope gaps.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md instructs users/agents to run an installation command that downloads and executes a script from https://cli.brightdata.com/install.sh (curl | bash). That domain appears to be the vendor's official CLI host (lower risk than a random IP), but piping a remote script to a shell is high-risk behavior in general and the skill does not document verification (checksums, pinned release, or manual review).
Credentials
The skill declares no required environment variables or primary credential, yet the workflow depends on Bright Data CLI which requires authentication (the SKILL.md calls for 'bdata login'). Additionally, example workflows assume availability of other CLI utilities (jq, xargs) and ability to write files. The lack of declared credentials or config paths is disproportionate to what the instructions require and omits where sensitive tokens would be stored or how they are protected.
Persistence & Privilege
The skill is not always-enabled and does not request persistent privileges via the registry metadata. It is instruction-only and does not modify other skills' configs. However, because the SKILL.md tells agents to install a third-party CLI that writes to disk, the skill could create installed binaries on the host if followed — this is an operational concern but not a registry-declared privilege.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install market-intel - After installation, invoke the skill by name or use
/market-intel - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release: real-time competitive intelligence skill using Bright Data’s web scraping infrastructure.
- Supports on-demand analysis of competitors’ pricing, features, reviews, hiring, and content strategies via live web data.
- Includes clear workflow: clarify user needs, gather fresh data, apply analysis frameworks, and deliver actionable insights.
- Provides modular analysis for competitor profiling, pricing intelligence, review insights, hiring signals, and SEO/content comparison.
- Emphasizes efficient, parallelized data collection and strict citation of all sources.
- Requires Bright Data CLI setup; no API keys or complex configuration needed.
Metadata
Frequently Asked Questions
What is competitive-intel?
Real-time competitive intelligence and market research using Bright Data's web scraping infrastructure. Analyzes competitors' pricing, features, reviews, hir... It is an AI Agent Skill for Claude Code / OpenClaw, with 105 downloads so far.
How do I install competitive-intel?
Run "/install market-intel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is competitive-intel free?
Yes, competitive-intel is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does competitive-intel support?
competitive-intel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created competitive-intel?
It is built and maintained by Meir Kadosh (@meirk-brd); the current version is v1.0.0.
More Skills