← 返回 Skills 市场
112
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install supply-chain-optimization-shopify
功能描述
Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV...
安全使用建议
This skill's calculator code appears to do what the description promises, but the SKILL.md asks you to (a) export Shopify/ShipBob credentials and (b) npx-install a package from 'nexscope-ai' — neither of which are declared in the registry metadata. Before installing or providing tokens: 1) Verify the publisher (homepage or repository) and confirm the npm package identity; 2) Inspect the full package that 'npx' would fetch (don’t run it blind); 3) If you must supply API credentials, create least‑privilege/read‑only tokens and limit scopes and lifetime; 4) Consider testing with synthetic or sandbox store data first; 5) Ask the publisher to update the skill metadata to declare optional env vars and to provide a trusted homepage/repository and a reproducible install spec. If you cannot verify the remote package or publisher, avoid running the npx install or providing production credentials.
功能分析
Type: OpenClaw Skill
Name: supply-chain-optimization-shopify
Version: 0.1.0
The skill bundle is a legitimate supply chain analyzer for Shopify and DTC e-commerce stores. The core logic in `scripts/calculator.py` is a standalone calculator that processes business metrics like gross margins, cash cycles, and inventory days without any network or file system access. While `SKILL.md` mentions Shopify and ShipBob API tokens, it does so in an informational context for the agent, and there is no evidence of data exfiltration, malicious execution, or prompt injection intended to subvert the agent's behavior.
能力评估
Purpose & Capability
The included Python calculator computes supply‑chain and DTC metrics consistent with the skill's description. However, the SKILL.md explicitly documents Shopify and ShipBob API environment variables for fetching orders/inventory while the registry metadata lists no required credentials — an undeclared optional integration. That inconsistency should be clarified (optional tokens are reasonable for richer analysis, but they must be declared).
Instruction Scope
SKILL.md contains runtime instructions that go beyond local calculation: it tells the user/agent to export SHOPIFY_STORE_URL, SHOPIFY_ACCESS_TOKEN and SHIPBOB_API_TOKEN and to run an npx install command for 'nexscope-ai/eCommerce-Skills'. Those instructions cause network activity (fetching a remote package) and request tokens. The README does not clearly limit what data would be read/sent or how the remote package is trusted.
Install Mechanism
There is no formal install spec in registry metadata, but SKILL.md instructs users to run 'npx skills add nexscope-ai/eCommerce-Skills'. That implies downloading and running third‑party code from a package registry at runtime. The distributed bundle does include a local scripts/calculator.py (no obvious network calls in the visible portion), but the npx instruction introduces additional, undeclared code and supply‑chain risk.
Credentials
Registry metadata declares no required environment variables, yet SKILL.md shows example env vars for Shopify and ShipBob tokens. Requesting store tokens is proportionate to accessing Shopify/3PL APIs, but the fact they're not declared in the skill metadata (and the README instructs exporting them) is a red flag: the skill can ask for sensitive credentials without telling the platform upfront. If you provide tokens, prefer least‑privilege/read‑only tokens and explicitly verify what scopes are needed.
Persistence & Privilege
The skill does not request 'always: true' and does not declare any modifications to other skills or global agent config. There is no evidence it requests persistent elevated privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install supply-chain-optimization-shopify - 安装完成后，直接呼叫该 Skill 的名称或使用
/supply-chain-optimization-shopify触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of Supply Chain Optimization for Shopify/DTC stores.
- Diagnose bottlenecks in cash flow, inventory, shipping, and customer acquisition efficiency.
- Provides benchmarks for DTC key metrics: CAC, LTV/CAC, ad spend, gross/net margin, shipping ratio, inventory days, and more.
- Includes cost structure breakdown and industry references for payment processing, 3PL logistics, and platform differences (Shopify/DTC vs Amazon).
- Outlines API integration guidance for Shopify Admin and popular 3PL providers.
- Summarizes common bottlenecks and DTC health formulas for actionable insights.
- No API key required for basic analysis.
元数据
常见问题
Supply Chain Optimization Shopify 是什么？
Supply Chain Bottleneck Analyzer for Shopify/DTC stores. Diagnose cash flow, inventory, shipping costs, and customer acquisition efficiency. Includes CAC/LTV... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 112 次。
如何安装 Supply Chain Optimization Shopify？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install supply-chain-optimization-shopify」即可一键安装，无需额外配置。
Supply Chain Optimization Shopify 是免费的吗？
是的，Supply Chain Optimization Shopify 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Supply Chain Optimization Shopify 支持哪些平台？
Supply Chain Optimization Shopify 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Supply Chain Optimization Shopify？
由 Henk Nie（@phheng）开发并维护，当前版本 v0.1.0。
推荐 Skills