← 返回 Skills 市场

Firm Ecommerce Pack

Name: Firm Ecommerce Pack
Author: romainsantoli-web

作者 romainsantoli-web · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

497

总下载

当前安装

版本数

在 OpenClaw 中安装

/install firm-ecommerce-pack

功能描述

Curated skill bundle for e-commerce platforms, D2C brands and marketplace operators. Activates the firm pyramid with Marketing, Commercial, Operations and En...

使用说明 (SKILL.md)

firm-ecommerce-pack

Sector bundle for e-commerce & retail environments.

Activated departments

Department	Services activated	Focus
Marketing	Product Marketing · Growth Marketing · Content & Brand	Campaigns, SEO, UGC
Commercial	Sales Engineering · Revenue Operations · Partnerships	GMV, conversion, B2B
Engineering	Frontend · Backend · Data Engineering · Integration	Platform, APIs, feeds
Support Clients	Client Support Operations · Client Incident Response	CX, returns, escalations
Finance	FP&A · Pricing Strategy · Billing & Collections	Margin, pricing, cashflow
Operations	DevOps · Release · Documentation	Deployments, catalog ops

Recommended ClawHub skills to install alongside

npx clawhub@latest install activecampaign           # Email/CRM automation
npx clawhub@latest install airtable-automation      # Product catalog management
npx clawhub@latest install biz-reporter             # GA4 + Stripe analytics
npx clawhub@latest install ai-hunter-pro            # Social media trend automation
npx clawhub@latest install shopping-ecommerce       # Product data extraction
npx clawhub@latest install firm-orchestration       # A2A orchestration backbone
npx clawhub@latest install firm-delivery-export     # Output → PR / ticket / doc

Firm configuration overlay

{
  "agent": {
    "model": "anthropic/claude-opus-4-6",
    "workspace": "~/.openclaw/workspace/ecommerce-firm"
  },
  "agents": {
    "defaults": {
      "workspace": "~/.openclaw/workspace/ecommerce-firm"
    }
  }
}

Prompt: product launch orchestration

Use firm-orchestration with:
  objective: "Launch Summer 2026 collection across all channels by March 15"
  departments: ["marketing", "engineering", "operations"]
  constraints: ["budget €15k", "no discount > 20%", "mobile-first"]
  definition_of_done: "Launch checklist: landing page live, campaigns scheduled, inventory synced"
  delivery_format: "project_brief"

Prompt: CX incident response

Use firm-orchestration with:
  objective: "Triage 47 open complaints from payment gateway outage on Feb 27"
  departments: ["support_clients", "engineering", "finance"]
  constraints: ["SLA: 24h response", "auto-refund for orders \x3C €50"]
  definition_of_done: "Resolution report: refunds processed, root cause, prevention plan"
  delivery_format: "markdown_report"

Routing profiles

Task	Profile	Model hint
Campaign copy	`marketing` → `creative-premium`	Claude Opus
Code review	`engineering` → `reasoning-technical`	Claude Sonnet
Data analysis	`finance` → `analysis-deep`	Claude Opus
Product description	`marketing` → `translation-precision`	Claude Haiku

💎 Support

Si ce skill vous est utile, vous pouvez soutenir le développement :

Dogecoin : DQBggqFNWsRNTPb6kkiwppnMo1Hm8edfWq

安全使用建议

This skill is instruction-only and appears coherent with its ecommerce orchestration purpose, and it does not request secrets. However: (1) The publisher/source/homepage are missing — there's limited provenance so treat it with caution. (2) The SKILL.md recommends running several npx install commands; those will download and run third‑party code — review each package and its source before executing. (3) The suggested workspace path (~/.openclaw/workspace/ecommerce-firm) could create files in your home directory if followed — verify and sandbox if needed. (4) The metadata lists session tools (sessions_send/sessions_spawn/sessions_history); confirm what platform-level access those tools permit in your environment. If you plan to install the companion packages, validate their reputations and required credentials (e.g., ActiveCampaign, Airtable, Stripe integrations) before providing API keys.

功能分析

Type: OpenClaw Skill Name: firm-ecommerce-pack Version: 1.0.0 The skill bundle is classified as suspicious due to potential prompt injection vulnerabilities. The `SKILL.md` file contains `bash` code blocks with `npx clawhub@latest install` commands. While these are likely intended as user-facing recommendations, an AI agent susceptible to prompt injection could misinterpret and execute these commands, leading to the unintended installation of other OpenClaw skills. Additionally, the `sessions_spawn` tool is listed in `metadata.openclaw.tools`, which, depending on its capabilities, could allow the agent to execute arbitrary commands, further increasing the risk of unintended actions if combined with prompt injection.

能力评估

✓ Purpose & Capability

Name, description and SKILL.md are aligned: the skill is a sector bundle that provides prompts, routing profiles and recommended companion installs for e‑commerce orchestration. It does not request unrelated credentials or binaries.

ℹ Instruction Scope

SKILL.md contains prompts, a suggested agent config (workspace path under ~/.openclaw) and recommends installing several ClawHub packages via npx. The runtime instructions themselves do not instruct reading system secrets or unrelated files, but the recommended npx installs (user-initiated) will fetch external packages and the workspace path may cause files to be written under the user's home if the agent follows the overlay.

✓ Install Mechanism

There is no install spec and no code files — the skill is instruction-only, so nothing is automatically downloaded or written to disk by the skill itself.

✓ Credentials

The skill declares no required environment variables, no primary credential and no config paths. It does list internal OpenClaw tools (sessions_send/sessions_spawn/sessions_history) in metadata; these are plausible for an orchestration bundle but you should confirm what those tools permit in your platform.

✓ Persistence & Privilege

always is false and default autonomy settings are used. The skill suggests a workspace path but does not force persistent installation or request elevated privileges. Nothing in the manifest indicates it will modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install firm-ecommerce-pack
安装完成后，直接呼叫该 Skill 的名称或使用 /firm-ecommerce-pack 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of curated skill bundle for e-commerce, D2C brands, and marketplace operators. - Activates pre-configured Marketing, Commercial, Engineering, Operations, Support, and Finance agents for key workflows. - Enables catalog management, campaign orchestration, customer support, and revenue operations. - Includes routing profiles and prompt examples for common sector scenarios. - Recommends compatible ClawHub skills for enhanced automation and analytics. - Provides ready-to-use firm configuration overlay for quick setup.

元数据

Slug firm-ecommerce-pack

版本 1.0.0

许可证 —

累计安装 3

当前安装数 3

历史版本数 1

常见问题