Store Onboarding

Complete the first-time setup wizard for a new Mobazha store. Use after deployment to configure admin password, store name, currencies, and profile.

This skill appears to implement a legitimate store onboarding flow, including setting an admin password and obtaining a bearer token. However, the skill metadata does NOT declare required credentials even though SKILL.md says credentials will be used — that's an inconsistency you should fix or confirm before using. Before installing or running: 1) Confirm the skill source and trustworthiness; 2) Only provide the admin password and bearer token interactively, never as persistent env vars or files; 3) Require the agent to ask for explicit consent and to confirm the target store URL (to avoid mis-targeting); 4) Test the flow on a non-production instance first; 5) Ask the publisher/maintainer to update registry metadata to declare the credential types (primary credential) so the platform can protect them. If you cannot verify the source or the metadata is not fixed, consider the skill suspicious and avoid using it for production stores.

Type: OpenClaw Skill Name: mobazha-store-onboarding Version: 0.2.0 The skill bundle provides legitimate documentation and API instructions for the first-time setup of a Mobazha store. It includes security-conscious instructions for the AI agent to handle credentials safely and provides standard administrative troubleshooting commands for local database resets in SKILL.md. No evidence of malicious intent, data exfiltration, or unauthorized access was found.