Skills/ClawHub/dsers-dropshipping

dsers-dropshipping@0.1.2

VERIFIED

Publisher claims: "Practical help for dropshipping sellers on Shopify and similar stores with problems that cost money: checking whether each product really makes a profit after payment fees, ads, refunds, and duties, and setting prices; handling supplier and order problems such as an item out of stock after the customer paid, supplier cancellations, late or lost parcels, wrong or damaged items, returns, and PayPal or card disputes; cleaning up products imported from AliExpress or other suppliers (keyword-stuffed titles, supplier text, unclear variants, sizing, watermarked images) into store-ready listings or a Shopify CSV; and checking a dropship store before launch against payment, Google, ad, and US, EU, and UK consumer rules. Made by DSers for dropshippers; works without any account. When DSers MCP, the official MCP server from DSers, is connected, it also uses live supplier data and can save products, prices, and pricing rules to the user's DSers account." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher dsers · joined 5 days agoInstalls 86Last detonated 5d ago
$clawhub install dsers-dropshipping
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 93/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Authorization escalation languagereferences/connect-dsers.md:34 · Authorization escalation languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
CRITICAL
Prompt injectionreferences/connect-dsers.md:34 · Prompt injection — known jailbreak technique referenceFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01