CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

30.8 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 88 · 1 finding

MEDIUMInstruction telling the agent not to ask for approvalSS-SKILL-INJECT-DONT-ASK-01 · Prompt injection · README.md

MEDIUM — it fires on intent; the real damage depends on the host agent's own approval-gating.

Why it matters

The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.

The exact value spotted

excerptREADME.md· markdown

99`setup start` returns immediately with account-ready status and stores auth locally.

100

101In OpenClaw, prefer the installed CLISHOP MCP tools over CLI shell commands. For address man

… (107 chars elided on L101)

102

103- Search products right away with `clishop search <query>`

Occurrences

1 occurrence · at L101

How to fix

Remove the approval-skipping instruction, or scope it narrowly to a specific safe, reversible action.

Delete blanket "don't ask / no need to confirm" directives from the skill.
If the skill is a genuine autonomous job, restrict the opt-out to a named non-destructive action rather than all actions.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-DONT-ASK-01sha25614b7852251bf4666…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md8.3 KB · Markdown

<h1 align="center">CLISHOP</h1> Order anything from your terminal. Built for AI agents and humans. <a href="https://www.npmjs.com/package/clishop"><img alt="npm" src="https://img.shields.io/npm/v/clishop?style=flat-square&color=cb3837" /></a> <a href="https://clishop.ai"><img alt="Website" src="https://img.shields.io/badge/website-clishop.ai-blue?style=flat-square" /></a> <a href="https://discord.gg/vwXMbzD4bx"><img alt="Discord" src="https://img.shields.io/badge/Discord-Join-5865F2?style=flat-square&logo=discord&logoColor=white" /></a>

CLISHOP is an open-source CLI that lets AI agents and humans search for products across multiple stores, compare prices, and place real orders — all from the terminal. Anyone can sell on CLISHOP using a Dark Store.

Works with

Highlights

One query searches every store in the network. Results are filtered to what actually ships to your address.
Set spending caps per order, require email confirmation before anything ships, or let it go through automatically — your call.
Ships as a native MCP server with 46 tools. Works with VS Code Copilot, Claude, Cursor, Windsurf, and anything else that speaks MCP.
Can't find what you need? Post an advertise request and let vendors compete to fulfill it.
Support tickets, product reviews, store reviews — all from the terminal.
Anyone can sell on CLISHOP by deploying a Dark Store. No website needed.

Install

Requires Node.js ≥ 18. Works on macOS, Windows, and Linux/WSL.

npm install -g clishop

This gives you two commands: clishop (the CLI) and clishop-mcp (the MCP server for AI agents).

OpenClaw

Once the ClawHub package is published, install CLISHOP into an OpenClaw workspace with:

openclaw plugins install clawhub:clishop

The bundle exposes the CLISHOP skill under skills/clishop/SKILL.md and merges the packaged MCP defaults from .mcp.json so OpenClaw can launch the bundled CLISHOP MCP runtime locally without fetching npm code at startup.

Linux / WSL

CLISHOP works out of the box on Linux and WSL. On systems without a native keychain, tokens are stored in a local file (~/.config/clishop/auth.json) with restricted permissions.

For native keychain support (optional):

sudo apt install libsecret-1-0

Run clishop doctor to check your system's compatibility.

From source

git clone https://github.com/DavooxBv2/CLISHOP.git
cd CLISHOP
npm install
npm run build
npm link

Quick Start

You can create your account on clishop.ai or do everything from the CLI.

Setup

Setup only needs an email address. Search first, then add your address and payment method when you're ready to buy.

For OpenClaw, MCP clients, Claude-style shells, and other tool runners, use:

clishop setup start --email [email protected] --json

setup start returns immediately with account-ready status and stores auth locally.

In OpenClaw, prefer the installed CLISHOP MCP tools over CLI shell commands. For address management, the intended flow is to call list_addresses first, then add_address non-interactively with any known fields, and ask the user only for missing required address fields (label, firstName, lastName, line1, city, postalCode, country). For payments, use add_payment_method to generate a secure setup link for the human, then check list_payment_methods after the human completes the web flow. The agent should never ask for raw card details in chat.

Search products right away with clishop search <query>
Add a shipping address later with clishop address add
Add a payment method later with clishop payment add

After setup is complete, add a shipping address and start ordering:

$ clishop search "wireless headphones"

  🔍 Search results for "wireless headphones"

  1  Sony WH-1000XM5                           $278.00
     SUPERSTORE · ★ 8.1 · Free shipping · 3-5 days

  2  JBL Tune 770NC Wireless                    $79.95
     EveryMarket · ★ 7.9 · $5.99 shipping · 5-8 days

$ clishop info 1

  Sony WH-1000XM5
  ─────────────────────────────────────
  Price:       $278.00
  Store:       SUPERSTORE (★ 8.1)
  Shipping:    Free · 3-5 business days
  Returns:     30-day free returns
  In stock:    Yes

  Industry-leading noise cancellation with
  Auto NC Optimizer. 30-hour battery life.
  Multipoint connection for two devices.

clishop buy 1

Tip: use result numbers from a search anywhere — clishop info 1 2 3 or clishop buy 2.

Diagnostics

If something isn't working, run:

clishop doctor

This checks keychain availability, token storage, authentication status, and API connectivity.

Architecture

┌─────────────────────────────┐
│  AI Agent / Script / Human  │
└──────────────┬──────────────┘
               │
       ┌───────▼───────┐
       │  CLISHOP CLI   │  ← this repo
       │  (Node.js)     │
       └───────┬───────┘
               │ HTTPS
       ┌───────▼───────┐
       │  CLISHOP API   │  ← backend (Vercel)
       └───────┬───────┘
               │
    ┌──────────┼──────────┐
    ▼          ▼          ▼
 Store A    Store B    Store C   ← vendor Dark Stores

Sell on CLISHOP

You can run your own store with the Dark Store template. Define your catalog, shipping rules, and pricing in YAML, deploy to Vercel, and you're live. No website needed.

Development

git clone https://github.com/DavooxBv2/CLISHOP.git
cd CLISHOP && npm install
npm run dev -- search "headphones"   # Dev mode (no build needed)
npm run build                        # Production build
npm run lint                         # Type-check

MCP Server

CLISHOP ships as a native MCP server with 46 tools. Any MCP-compatible client gets shopping capabilities out of the box.

clishop-mcp              # If installed globally
node ./dist/mcp.js       # From the installed package directory

The MCP onboarding tools now follow the same email-first model:

setup creates the account immediately from the email address
setup_status remains available only for legacy setup IDs

See the MCP setup guides for VS Code, Claude Desktop, Cursor, and Windsurf configuration.

Docs

Full command reference, agent configuration, search filters, and more:

[→ clishop.ai/docs](https://clishop.ai/docs)

License

MIT

clawhub-bundle— mcp server

Is clawhub-bundle safe to install?

Works with

Highlights

Install

OpenClaw

Linux / WSL

From source

Quick Start

Setup

Diagnostics

Architecture

Sell on CLISHOP

Development

MCP Server

Docs

Links

License

Audit the pieces. Scan the whole. Decide.