Supplychainsentinel

Monitor supplier APIs, port delays, and weather in real-time to trigger automatic PO rerouting and stakeholder alerts. Use when the user needs supply chain d...

This skill is largely coherent for supply-chain monitoring, but it can perform high-impact automated actions (creating POs, rerouting orders) and requires broad access to your DATABASE_URL and notification endpoints. Before installing: (1) use least-privilege service accounts and limit DATABASE_URL to a read-only/controlled schema if possible; (2) never provide full admin DB credentials — create a scoped user for just the needed tables; (3) ensure ERP integrations require separate, auditable credentials and consider requiring manual approval for PO creation; (4) route Slack/sendgrid webhooks to test channels first; (5) test in a staging environment and review logs/alerts; (6) if you cannot limit permissions or if automatic PO creation is unacceptable, do not install or disable autonomous invocation and require manual confirmation for any financial action.

Type: OpenClaw Skill Name: supplychainsentinel Version: 1.0.0 The SupplyChainSentinel skill is a legitimate tool for logistics monitoring and automated purchase order rerouting. It utilizes standard industry APIs (Shippo, Flexport, OpenWeather) and requires environment variables and database access consistent with its documented functionality. No evidence of malicious intent, data exfiltration, or harmful prompt injection was identified.