WordPress/WooCommerce Connector Lite

Connects to a WooCommerce store via the OpenClaw Connector Lite plugin to fetch orders and products.

Before installing: 1) Resolve the metadata mismatch — confirm with the publisher why the registry lists no required env vars while SKILL.md and the code require OPENCLAW_STORE_URL and OPENCLAW_STORE_SECRET. 2) Only provide your Store Secret to this skill if you trust the OpenClaw Connector Lite plugin installed on your WordPress site — that secret grants API access to your store endpoints. 3) Review the WordPress plugin code and the plugin's endpoint (/wp-json/openclaw/v1/*) on your site to ensure they behave as expected; if the plugin is from an unknown source, do not share secrets. 4) Expect to run npm install (axios dependency) in the skill directory; run this in an isolated environment if you have concerns. 5) If possible, create a scoped or read-only secret for agent access, and monitor store logs for unexpected requests. If you cannot verify the plugin and the source, treat this skill as untrusted.

Type: OpenClaw Skill Name: wooclaw-lite Version: 1.0.1 The skill is designed to connect to a user-configured WooCommerce store to fetch order and product information and check store status. It requires `OPENCLAW_STORE_URL` and `OPENCLAW_STORE_SECRET` from environment variables, which are used to make authenticated API calls to the specified store. All network requests are directed to the user's own store URL, and requests are secured with HMAC-SHA256 signatures. There is no evidence of data exfiltration to unauthorized third parties, malicious execution, persistence mechanisms, or prompt injection attempts against the agent in `SKILL.md` or other files. The dependencies are standard and appropriate for the stated functionality.