← Back to Skills Marketplace
phheng

Supply Chain Optimization Shopify

by Henk Nie · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
112
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install supply-chain-optimization-shopify
Description
Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV...
Usage Guidance
This skill's calculator code appears to do what the description promises, but the SKILL.md asks you to (a) export Shopify/ShipBob credentials and (b) npx-install a package from 'nexscope-ai' — neither of which are declared in the registry metadata. Before installing or providing tokens: 1) Verify the publisher (homepage or repository) and confirm the npm package identity; 2) Inspect the full package that 'npx' would fetch (don’t run it blind); 3) If you must supply API credentials, create least‑privilege/read‑only tokens and limit scopes and lifetime; 4) Consider testing with synthetic or sandbox store data first; 5) Ask the publisher to update the skill metadata to declare optional env vars and to provide a trusted homepage/repository and a reproducible install spec. If you cannot verify the remote package or publisher, avoid running the npx install or providing production credentials.
Capability Analysis
Type: OpenClaw Skill Name: supply-chain-optimization-shopify Version: 0.1.0 The skill bundle is a legitimate supply chain analyzer for Shopify and DTC e-commerce stores. The core logic in `scripts/calculator.py` is a standalone calculator that processes business metrics like gross margins, cash cycles, and inventory days without any network or file system access. While `SKILL.md` mentions Shopify and ShipBob API tokens, it does so in an informational context for the agent, and there is no evidence of data exfiltration, malicious execution, or prompt injection intended to subvert the agent's behavior.
Capability Assessment
Purpose & Capability
The included Python calculator computes supply‑chain and DTC metrics consistent with the skill's description. However, the SKILL.md explicitly documents Shopify and ShipBob API environment variables for fetching orders/inventory while the registry metadata lists no required credentials — an undeclared optional integration. That inconsistency should be clarified (optional tokens are reasonable for richer analysis, but they must be declared).
Instruction Scope
SKILL.md contains runtime instructions that go beyond local calculation: it tells the user/agent to export SHOPIFY_STORE_URL, SHOPIFY_ACCESS_TOKEN and SHIPBOB_API_TOKEN and to run an npx install command for 'nexscope-ai/eCommerce-Skills'. Those instructions cause network activity (fetching a remote package) and request tokens. The README does not clearly limit what data would be read/sent or how the remote package is trusted.
Install Mechanism
There is no formal install spec in registry metadata, but SKILL.md instructs users to run 'npx skills add nexscope-ai/eCommerce-Skills'. That implies downloading and running third‑party code from a package registry at runtime. The distributed bundle does include a local scripts/calculator.py (no obvious network calls in the visible portion), but the npx instruction introduces additional, undeclared code and supply‑chain risk.
Credentials
Registry metadata declares no required environment variables, yet SKILL.md shows example env vars for Shopify and ShipBob tokens. Requesting store tokens is proportionate to accessing Shopify/3PL APIs, but the fact they're not declared in the skill metadata (and the README instructs exporting them) is a red flag: the skill can ask for sensitive credentials without telling the platform upfront. If you provide tokens, prefer least‑privilege/read‑only tokens and explicitly verify what scopes are needed.
Persistence & Privilege
The skill does not request 'always: true' and does not declare any modifications to other skills or global agent config. There is no evidence it requests persistent elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install supply-chain-optimization-shopify
  3. After installation, invoke the skill by name or use /supply-chain-optimization-shopify
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of Supply Chain Optimization for Shopify/DTC stores. - Diagnose bottlenecks in cash flow, inventory, shipping, and customer acquisition efficiency. - Provides benchmarks for DTC key metrics: CAC, LTV/CAC, ad spend, gross/net margin, shipping ratio, inventory days, and more. - Includes cost structure breakdown and industry references for payment processing, 3PL logistics, and platform differences (Shopify/DTC vs Amazon). - Outlines API integration guidance for Shopify Admin and popular 3PL providers. - Summarizes common bottlenecks and DTC health formulas for actionable insights. - No API key required for basic analysis.
Metadata
Slug supply-chain-optimization-shopify
Version 0.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Supply Chain Optimization Shopify?

Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV... It is an AI Agent Skill for Claude Code / OpenClaw, with 112 downloads so far.

How do I install Supply Chain Optimization Shopify?

Run "/install supply-chain-optimization-shopify" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Supply Chain Optimization Shopify free?

Yes, Supply Chain Optimization Shopify is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Supply Chain Optimization Shopify support?

Supply Chain Optimization Shopify is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Supply Chain Optimization Shopify?

It is built and maintained by Henk Nie (@phheng); the current version is v0.1.0.

💬 Comments