← 返回 Skills 市场

icosmos Amazon

Name: icosmos Amazon
Author: taceywong

作者王新勇(Tacey Wong) · GitHub ↗ · v0.0.1 · MIT-0

cross-platform ⚠ suspicious

206

总下载

当前安装

版本数

在 OpenClaw 中安装

/install icosmos-amazon

功能描述

Shopify 店铺运营/诊断技能：从 Supabase 拉取店铺域名与 token，做装修/产品/结账/指标异常检测，并支持发布引流博文（唯一写操作）。

使用说明 (SKILL.md)

\r \r

icosmos-shopify\r

\r 面向 OpenClaw 触发的 Shopify 运营能力集合：以只读诊断为主，帮助定位转化/营销/商品问题；唯一写操作是发布 Shopify Blog 文章（需要明确 --confirm）。\r \r \r \r

触发\r

适用场景关键词：店铺审计、装修优化、产品优化、结账/checkout 测试、转化下降、营销效果差、发布博客/引流文章。\r
触发后执行顺序：\r
1. setup once：用 ICOSMOS_USER_EMAIL / ICOSMOS_USER_PASSWORD 同步店铺与 token 到本地缓存\r
2. content/*：拉原始数据（更全面、更可追溯）\r
3. audit/* / test checkout：给诊断与验证\r
4. blog publish：仅当明确需要发布时执行（必须 --confirm）\r \r

快速参考\r

\r | 诉求 | 命令 |\r |---|---|\r | Setup Once：从 Supabase 同步店铺/token 到本地 | icosmos-shopify setup once |\r | 列出店铺 | icosmos-shopify stores list |\r | 获取店铺基础信息（原始数据） | icosmos-shopify content shop --store xxx.myshopify.com |\r | 获取产品列表（原始数据，分页） | icosmos-shopify content products list --store xxx.myshopify.com --first 20 --after \x3Ccursor> |\r | 获取订单列表（原始数据，时间窗） | icosmos-shopify content orders list --store xxx.myshopify.com --start \x3CRFC3339> --end \x3CRFC3339> |\r | 获取博客列表/文章（原始数据） | icosmos-shopify content blogs list --store xxx.myshopify.com / icosmos-shopify content blogs articles list --store xxx.myshopify.com --blog-id 123 |\r | 装修检查单（只读） | icosmos-shopify audit theme --store xxx.myshopify.com |\r | 产品质量诊断（只读） | icosmos-shopify audit products --store xxx.myshopify.com --limit 50 |\r | 结账链路测试（只读） | icosmos-shopify test checkout --store xxx.myshopify.com |\r | 经营指标与异常线索（只读） | icosmos-shopify audit metrics --store xxx.myshopify.com --days 7 |\r | 发布引流博文（写操作） | icosmos-shopify blog publish --store xxx.myshopify.com --blog-id 123 --title ... --body-file article.html --confirm |\r \r

输出协议（给 OpenClaw 更稳定）\r

默认推荐 --format json（content/* 默认就是 json），统一结构：\r
- store_domain / api_version / meta / data\r
分页信息：\r
- GraphQL：meta.page_info.has_next_page/end_cursor\r
- REST：meta.page_info.next_link（来自 Link: rel="next"）\r \r

依赖与配置\r

\r \r

Setup Onece：\r \r
- ICOSMOS_USER_EMAIL\r
- ICOSMOS_USER_PASSWORD\r \r 两个字段需要保存到系统环境变量\r \r 所需命令行工具为当前目录下的icosmos-shopify\r \r

Shopify\r

SHOPIFY_API_VERSION（默认 2026-01）\r \r

安全边界（重要）\r

默认只读：装修/产品/指标/结账测试均不对 Shopify 做写入。\r
唯一写操作：发布博客：必须提供 --confirm；否则即使参数齐全也只会 dry-run。\r
日志脱敏：店铺 token 只显示前后 4 位（abcd...wxyz）。\r
敏感字段处理：订单 email 等敏感字段默认不输出（或置空），避免在群聊/日志泄露。\r \r

常见问题与排障\r

401/403：Admin token scopes 不足或 token 过期；确认 Shopify Custom App 的 Admin API access token 与权限。\r
429 Too Many Requests：已做退避重试；如果频繁触发，降低并发/减少拉取字段/缩小时间范围。\r
Storefront 430 Security Rejection：请求可能被判定为异常；需要检查请求来源、token 是否正确，必要时增加更真实的请求头策略（后续增强）。\r \r

参考文档\r

安全使用建议

Do not install or provide credentials until you verify the source. Key things to check before using: 1) Confirm whether the skill author intended this for Shopify (metadata/name mismatch). 2) Ask the author to update the package metadata to declare required env vars and the dependency on a local 'icosmos-shopify' binary (and provide its origin). 3) Never put high-privilege Shopify admin tokens or long-lived passwords into system-wide environment variables unless you trust the code and have minimized scopes; prefer temporary tokens or least-privilege app tokens. 4) Understand where Supabase credentials come from: who controls that DB and what data (shop tokens) will be returned and cached. 5) If you must test, do so in a sandbox store with limited-scoped tokens and use the blog publish --confirm safeguard only after manual review. If the author cannot explain the metadata/binary/env inconsistencies, treat the package as untrusted.

功能分析

Type: OpenClaw Skill Name: icosmos-amazon Version: 0.0.1 The skill bundle requires sensitive user credentials (ICOSMOS_USER_EMAIL and ICOSMOS_USER_PASSWORD) to synchronize Shopify store tokens from an external Supabase instance to a local cache. While this aligns with the stated purpose of multi-store management, the actual logic is contained in an external binary (icosmos-shopify) not provided for review, and there is a discrepancy between the metadata slug (icosmos-amazon) and the skill content (icosmos-shopify), which may indicate a templated or misleading configuration.

能力评估

⚠ Purpose & Capability

Metadata/packaging mismatch: the registry name is 'icosmos Amazon' but the SKILL.md and description refer exclusively to Shopify ('icosmos-shopify'). The SKILL.md's purpose (Shopify store diagnostics, reading tokens from Supabase, only one write action to publish a blog) is plausible, but the package-level name/description inconsistency is confusing and could indicate sloppy packaging or mislabeling.

⚠ Instruction Scope

The runtime instructions say the skill will '从 Supabase 拉取店铺域名与 token' and that setup requires ICOSMOS_USER_EMAIL / ICOSMOS_USER_PASSWORD to be saved in system env. The instructions also require a local CLI binary named 'icosmos-shopify' to exist in the current directory. None of these requirements are declared in the skill metadata. The instructions therefore expect access to sensitive shop tokens and to persist credentials locally — a scope that should have been explicitly declared.

ℹ Install Mechanism

This is an instruction-only skill (no install spec), which is low-risk by itself. However, SKILL.md expects a local executable './icosmos-shopify' to be present and run; the registry metadata lists no required binaries. That mismatch means the skill implicitly depends on an external binary (unknown origin), which you must supply or trust.

⚠ Credentials

Registry metadata lists no required environment variables, but SKILL.md explicitly instructs the user to store ICOSMOS_USER_EMAIL and ICOSMOS_USER_PASSWORD in system environment variables and notes that it will pull/store shop tokens. These are sensitive credentials (and Shopify admin tokens are high-privilege). The skill also references SHOPIFY_API_VERSION. Requesting persistent system env storage and local caching of tokens is disproportionate to the fact that no envs were declared in metadata and should be justified and documented.

ℹ Persistence & Privilege

The package does not request always:true and has no install script, so it does not force persistence at the platform level. But SKILL.md instructs storing user credentials in system env and caching shop tokens locally. That creates on-disk/long-lived secrets under the user's responsibility — a persistence design choice the user should understand and control.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install icosmos-amazon
安装完成后，直接呼叫该 Skill 的名称或使用 /icosmos-amazon 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.0.1

- Initial release of the skill (version 0.0.1). - Provides Shopify store operation and diagnostics, mainly read-only: store auditing, theme/product/checkout/metrics checks. - Fetches store domain and token from Supabase; syncs to local cache. - Only write action is publishing a Shopify blog post (requires --confirm). - Commands support JSON output; sensitive information and tokens are masked by default. - Designed for store audit, optimization, checkout testing, marketing analysis, and automated content publishing.

元数据

Slug icosmos-amazon

版本 0.0.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题

icosmos Amazon 是什么？

Shopify 店铺运营/诊断技能：从 Supabase 拉取店铺域名与 token，做装修/产品/结账/指标异常检测，并支持发布引流博文（唯一写操作）。它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 206 次。

如何安装 icosmos Amazon？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install icosmos-amazon」即可一键安装，无需额外配置。

icosmos Amazon 是免费的吗？

是的，icosmos Amazon 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

icosmos Amazon 支持哪些平台？

icosmos Amazon 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 icosmos Amazon？

由王新勇(Tacey Wong)（@taceywong）开发并维护，当前版本 v0.0.1。