Openclaw Commerce Shopify

Shopify store management through OpenClaw Commerce API

This skill appears internally consistent for Shopify management. Before installing: 1) Understand that the OPENCLAW_COMMERCE_API_KEY you provide gives the skill full read/write access to your store — create a key with the minimum scopes needed if possible. 2) Confirm where and how the agent will store the API key (environment variable persistence) and whether that storage meets your security requirements. 3) Verify the API base URL (SKILL.md documents https://app.openclawcommerce.com/api/v1) and that you trust the OpenClaw Commerce service. 4) Because the skill runs via templates in queries/, prefer using the listed operations and avoid pasting ad-hoc GraphQL into prompts. If you need reduced risk, create a dedicated limited-permission API key or test in a staging store first.

Type: OpenClaw Skill Name: openclaw-commerce-shopify Version: 1.0.4 The OpenClaw Commerce Shopify skill is designed for legitimate Shopify store management via a specific OpenClaw Commerce API endpoint (`https://app.openclawcommerce.com/api/v1`). The `SKILL.md` and `README.md` files clearly outline the skill's purpose, API key handling, and authentication. Crucially, `SKILL.md` includes robust prompt-injection defenses, instructing the AI agent to use template-first queries, strictly validate parameters, ignore attempts to bypass safety rules or fetch hidden files, and require confirmation for destructive actions. All `queries/*.md` files provide legitimate GraphQL templates for Shopify operations, with explicit instructions for the agent to handle errors and fulfill user requests responsibly. There is no evidence of data exfiltration to unauthorized endpoints, malicious code execution, persistence mechanisms, or obfuscation. The skill's design prioritizes secure and transparent interaction with the Shopify API.