TikTok Shop e-commerce data assistant. Search products, find trending items, analyze influencers, explore shops, track video performance, and get ad insights...
Security Analysis
high confidenceThe skill's requirements and runtime instructions are consistent with a TikTok Shop analytics integration: it only needs an EcomSeer API key, calls ecomseer.com endpoints, and uses a separate 'deep research' service for multi-call analyses.
Name/description (TikTok Shop analytics) match the declared primary credential (ECOMSEER_API_KEY) and the SKILL.md / reference docs describe GET endpoints on ecomseer.com that align with product, shop, influencer, video, and ad functionality.
SKILL.md includes concrete runtime steps: check $ECOMSEER_API_KEY, validate it via curl to ecomseer.com, and for 'Deep' queries submit tasks to a deepresearch service (deepresearch.ecomseer.com). This is coherent for an analytics/reporting skill, but it does mean user queries and context will be transmitted to the vendor's 'deep research' service and reports are hosted/shareable—users should expect that their query text and any provided context will leave the local agent.
Instruction-only skill with no install spec and no code to write to disk; low install risk.
Only the ECOMSEER_API_KEY is declared/used. The SKILL.md consistently references $ECOMSEER_API_KEY for API calls and for key validation. No unrelated secrets or system credentials are requested.
always:false (normal). The instructions tell the agent how to store the API key via 'openclaw config set skills.entries.ecomseer.apiKey "{KEY}"' when a user pastes a key—this writes the key into the agent's skill config (expected behavior) and is limited to the skill's config. The skill does not request permanent system-wide privileges.
Guidance
This skill appears coherent for TikTok Shop analytics, but note two privacy points before installing: (1) Deep/complex queries are sent to a vendor-hosted deepresearch service and reports are hosted/shareable — avoid sending sensitive or confidential data in queries you don't want transmitted. (2) If you paste your API key into chat the skill instructs the agent to run 'openclaw config set ...' to store it; that stores the key in the agent config (do this only if you trust the EcomSeer service). Otherwise, the skill only needs the single ECOMSEER_API_KEY and uses it as described.
Latest Release
v1.0.1
Version 1.0.1 - Switched the Deep Research endpoint from `deepresearch.admapix.com` to `deepresearch.ecomseer.com` for all research task submissions and polling. - No changes to API, user prompts, or skill logic. All interaction and language handling workflows remain unchanged.
More by @fly0pants
Published by @fly0pants on ClawHub
