Shopify Product Uploader

Upload and manage Shopify products individually or in bulk with SEO-optimised titles, descriptions, tags, support for variants, collections, inventory, and d...

This skill appears to do what it claims: it will prompt you to provide your Shopify store handle and an Admin API token (shpat_...) and then use that token to call your store's Admin API to create/update products and inventory. Before installing or activating it: 1) Prefer creating a custom app token with only the minimum scopes listed (write_products, read_products, write_inventory, read_inventory, write_collections, read_collections) rather than using a full-store owner token. 2) Confirm how OpenClaw stores long‑term memory in your deployment (encryption, who/what can access those secrets) — if you’re uncomfortable, don’t allow persistent storage and instead require the token per session. 3) Understand the agent can act autonomously by default; if you want to prevent background changes, disable autonomous invocation or require explicit user confirmation (the SKILL.md says it will ask for YES before uploading, but persistent tokens enable later uploads). 4) Verify the skill source/owner before granting access — there’s no homepage and the publisher is an opaque ID. 5) Rotate the token if you ever revoke the skill’s access. If you follow these precautions the skill is coherent with its purpose and usable; if you cannot limit token scope or memory persistence, treat it as higher risk.

Type: OpenClaw Skill Name: shopify-product-uploader Version: 1.0.0 The skill bundle is a legitimate tool designed to help users manage Shopify store listings via an AI agent. It includes detailed workflows for product uploads, bulk CSV processing, and SEO content generation. While it requires a sensitive Shopify Admin API token, the instructions in SKILL.md explicitly direct the agent to store the token securely in memory and never repeat it to the user. All network requests are directed to official Shopify API endpoints (myshopify.com), and the skill includes safety checks such as user confirmation before performing uploads or destructive actions like archiving/deletion.