← 返回 Skills 市场
179
总下载
0
收藏
0
当前安装
12
版本数
在 OpenClaw 中安装
/install openclaw-shopify-manager
功能描述
Connect OpenClaw to Shopify with guided setup, local `.env` secret storage, Shopify OAuth, webhook validation, product and content operations, and host or Do...
安全使用建议
This skill appears to do what it says: run a local Shopify connector, perform OAuth, validate HMACs, and call Shopify Admin APIs while storing secrets in a local .env. Before installing: (1) only provide the Shopify API key/secret to the guided setup and keep the runtime directory under your control; (2) inspect the provided service template and scripts if you plan to install systemd, and install the service manually (the skill does not auto-install); (3) run the connector locally first and verify health and OAuth flows before exposing any public URL; (4) if you use Tailscale, install/configure it yourself — the skill only documents usage and does not bundle any tunneling binaries; (5) be cautious with mutation commands (update/create) and confirm changes before proceeding. If you want additional assurance, review the full shopify-connector.mjs and setup-runtime.mjs files to confirm logging behavior and where token files are written.
功能分析
Type: OpenClaw Skill
Name: openclaw-shopify-manager
Version: 0.2.1
The OpenClaw Shopify Manager skill is a well-architected tool for managing Shopify stores with a strong emphasis on security and local control. It implements a local connector server (scripts/shopify-connector.mjs) using native Node.js modules to handle OAuth flows and webhooks, featuring robust HMAC validation and local secret storage in .env files. The setup process (scripts/setup-runtime.mjs) includes a 'doctor' mode to verify configuration integrity and ensures sensitive files are protected via .gitignore. No evidence of data exfiltration, malicious execution, or prompt injection was found; the skill explicitly defaults to read-only operations and requires user confirmation for mutations as outlined in SKILL.md and references/security-and-behavior.md.
能力评估
Purpose & Capability
Name/description (Shopify connector) align with the files and envs. Required env vars (SHOPIFY_API_KEY, SHOPIFY_API_SECRET, SHOPIFY_SHOP, SHOPIFY_REDIRECT_URI) match Shopify usage. Bundled scripts and docs all relate to bootstrapping a local connector, OAuth, webhooks, Tailscale guidance, and optional systemd deployment — nothing extraneous (e.g., cloud provider credentials) is requested.
Instruction Scope
SKILL.md and the referenced scripts instruct the agent to create a local runtime, write a local .env, run a small HTTP server, validate HMACs, and call Shopify APIs. They reference only local paths, systemd templates, and operator-managed ingress (Tailscale or reverse proxy). There is no instruction to read unrelated host files, exfiltrate secrets, or call unexpected third-party endpoints.
Install Mechanism
No remote install or download steps are bundled; it is instruction- and script-based (no installer fetching remote archives). The skill ships scripts and templates to be run locally by the operator. This is the low-risk pattern described in the policy.
Credentials
Requested environment variables are the standard Shopify app credentials and redirect info. The code does use optional runtime path env vars (SHOPIFY_RUNTIME_ROOT, SHOPIFY_ENV_PATH, etc.) for flexibility, but those are operational (not additional secrets). SHOPIFY_ACCESS_TOKEN is produced by OAuth and not required up-front.
Persistence & Privilege
The skill persists config, .env, state, and logs under a runtime directory controlled by the operator (default ~/oc/shopify-runtime). always is false and the skill does not request system-wide privilege changes; the service template is provided but must be installed manually by the operator.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-shopify-manager - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-shopify-manager触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.1
v0.2.1: redesign README and ClawHub-facing listing copy to be cleaner, more user-oriented, and more focused on Shopify outcomes and setup.
v0.2.0
v0.2.0: add smoother post-setup usage examples, support product lookup by title or id, add a canonical host installer helper, and ship a more plug-and-play sidecar compose starter.
v0.1.9
v0.1.9: add runtime .gitignore protection for .env/state/logs, extend doctor checks for runtime secret safety, and surface secret-handling guidance more clearly in the setup flow.
v0.1.8
v0.1.8: harden guided setup so Shopify secrets and the offline token stay in .env only by default, remove secret-passing examples from the public flow, and add explicit secret-handling guidance.
v0.1.7
v0.1.7: tighten ClawHub-facing metadata so the listing matches the guided low-friction setup flow and keep GitHub/ClawHub versions aligned.
v0.1.6
v0.1.6: add a guided setup flow, polish runtime diagnostics, add first-run success demo artifacts, and rework the install/setup path around a canonical low-friction install -> setup -> done flow.
v0.1.5
v0.1.5: reduce false-positive scanner signals by removing full webhook body logging, deleting one-time OAuth state after callback exchange, and clarifying least-privilege localhost-bound security behavior.
v0.1.4
v0.1.4: add the public project page to the GitHub repo metadata and README while keeping ClawHub aligned with the latest GitHub release.
v0.1.3
v0.1.3: add the public project page link to the GitHub repo and skill homepage metadata for ClawHub visibility.
v0.1.2
v0.1.2: declare Shopify env requirements, replace the referenced systemd asset with a registry-safe text template, and remove the remote installer-shell example from Tailscale guidance.
v0.1.1
v0.1.1: remove privileged helper scripts from the published skill bundle; keep GitHub as source of truth and ClawHub as release distribution only.
v0.1.0
Initial public release
元数据
常见问题
Openclaw Shopify Manager 是什么？
Connect OpenClaw to Shopify with guided setup, local `.env` secret storage, Shopify OAuth, webhook validation, product and content operations, and host or Do... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 179 次。
如何安装 Openclaw Shopify Manager？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-shopify-manager」即可一键安装，无需额外配置。
Openclaw Shopify Manager 是免费的吗？
是的，Openclaw Shopify Manager 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Openclaw Shopify Manager 支持哪些平台？
Openclaw Shopify Manager 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Openclaw Shopify Manager？
由 Dhawal（@dave8172）开发并维护，当前版本 v0.2.1。
推荐 Skills