Shopify

Shopify integration - currently under maintenance. Contact [email protected] for assistance.

This skill appears to be a placeholder that is 'under maintenance.' The main red flag is an internal inconsistency: SKILL.md says a Maton API key and network access are required, but the registry declares no required credentials. Before installing or enabling it: - Don't supply any API keys or tokens to this skill until the developer clarifies what credentials are needed and why. - Ask the publisher to update the registry metadata to list any required env vars (e.g., MATON_API_KEY) or remove the compatibility note if it's obsolete. - Because the skill currently does nothing beyond directing you to contact an email/website, there is no immediate code-level risk, but the metadata mismatch lowers trustworthiness. - If you need Shopify integration now, prefer a skill that explicitly declares its required credentials and has a working integration. If you want higher assurance, request from the maintainer a clear statement of required environment variables and a changelog or commit that explains the current maintenance status; that will change this assessment to 'benign' if consistent.

Type: OpenClaw Skill Name: shopify Version: 1.0.1 This skill bundle is benign. It contains only metadata, a license, and a `SKILL.md` file that explicitly states the Shopify integration is under maintenance and provides contact information. There are no executable files, no instructions for the AI agent to perform any actions, no prompt injection attempts, and no indications of malicious behavior such as data exfiltration or unauthorized access. The `compatibility` field mentions 'Requires network access', but this is a declaration of a prerequisite, not an instruction for the agent to perform network operations.