← Back to Skills Marketplace
92
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install linkfox-market-research
Description
亚马逊市场调研报告。用户给出类目名称和节点 ID，自动生成完整 HTML 报告（市场概览、价格、REVIEW、品牌、卖家、竞品 8 个维度）。触发词：市场调研、市调、market research、分析这个类目。
README (SKILL.md)
亚马逊市场调研报告
用户给出类目名称 + 节点 ID，一条命令生成完整报告。
触发方式
用户说出类目名和节点 ID 即可，例如：
- "Deck Boxes, 671804011"
- "帮我调研 Salon Chairs 15144890011"
- "市调一下 671804011"
执行
exec(
command='bash {baseDir}/scripts/market-research.sh "类目名称" 节点ID',
background=true,
timeout=600
)
等 process poll 完成后，用 open 打开输出的报告文件。
输出
- 文件：
output/{类目名}-market-report.html - 内容：8 个分析维度（市场概览、上架时间、价格、REVIEW、品牌、卖家、竞品Top10、总体评价）
- 格式：带左侧导航的单页 HTML，含表格和图表
- 耗时：约 3-5 分钟
前置条件
- 环境变量
LINKFOXAGENT_API_KEY已设置 - Python 3 可用
- 网络可访问 LinkFox Agent API
Usage Guidance
Key things to consider before installing:
- Metadata mismatch: the skill's SKILL.md and linkfox.py require LINKFOXAGENT_API_KEY, but the registry metadata does not declare any required env vars. Treat the API key as required — do not provide high-privilege credentials without verifying the service.
- Remote content execution: the workflow downloads HTML reports and merges them while preserving external CSS/JS references. Opening the final HTML will cause the browser to fetch and run remote resources. Only open the report if you trust agent-api.linkfox.com and the domains hosting the report files.
- Check the endpoint: linkfox.py posts to https://agent-api.linkfox.com/ with your API key in the Authorization header. Verify that domain and the service before supplying a key.
- Workspace bug: market-research.sh uses OUTPUT_DIR="$WORKSPACE/output" but WORKSPACE is not defined anywhere. If WORKSPACE is empty this may create /output at the filesystem root or otherwise place files in unexpected locations — run in a sandbox or inspect scripts first.
- Least privilege: if you decide to provide an API key, use a dedicated key/account with minimal permissions and monitor its usage.
- Sandboxing: run the scripts in an isolated environment (container or VM) the first time to observe network calls and file writes. Inspect downloaded HTML before opening in a browser or open it offline (block network) if you want to avoid remote JS execution.
- If you need clarity: ask the publisher for an explicit list of required env vars, exact domains the skill will contact, and whether returned HTML is sanitized. The metadata omission and embedding of external scripts are the main reasons this skill is flagged as suspicious.
Capability Assessment
Purpose & Capability
The skill's code (linkfox.py, run_task.sh, market-research.sh) legitimately implements submitting tasks to a LinkFoxAgent API and assembling reports, which matches the description. However, the registry metadata lists no required environment variables or primary credential while SKILL.md and linkfox.py require LINKFOXAGENT_API_KEY — this metadata omission is an incoherence and could lead users to install without providing the required credential or without realizing network calls will be made.
Instruction Scope
SKILL.md tells the agent to exec market-research.sh which runs run_task.sh and linkfox.py. The scripts download report URLs via curl and then merge the returned HTMLs. merge_html.py preserves external <link> and <script src=> references and injects them into the merged file, so opening the output will cause the user's browser to fetch and execute remote resources. The scripts also do no content sanitization or validation of downloaded HTML. These behaviors go beyond simple local formatting and introduce remote resource execution and potential content injection risk.
Install Mechanism
There is no install spec and no external installers — the skill is instruction/code-only. Nothing is downloaded at install time. The runtime does perform network I/O to LinkFoxAgent and to report URLs, which is expected for this purpose.
Credentials
The runtime requires LINKFOXAGENT_API_KEY (linkfox.py exits if it's not set) and network access, but the registry metadata does not declare this. Additionally market-research.sh writes to REPORT_DIR under /tmp and sets OUTPUT_DIR="$WORKSPACE/output" — WORKSPACE is not declared and may be empty, causing output to be created at /output (root) or an unexpected location. The number and sensitivity of environment references is small and proportional to the skill's purpose, but the missing declaration and the undefined WORKSPACE usage are problematic.
Persistence & Privilege
The skill does not request always: true and will not be force-installed. It does not modify other skills. It runs as-invoked and writes outputs under /tmp and the configured output directory; this is typical for CLI-style skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install linkfox-market-research - After installation, invoke the skill by name or use
/linkfox-market-research - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
One command to generate Amazon market research report. Input category node ID, get 8-dimension HTML report in 3-5 minutes.
Metadata
Frequently Asked Questions
What is LinkFox Market Research?
亚马逊市场调研报告。用户给出类目名称和节点 ID，自动生成完整 HTML 报告（市场概览、价格、REVIEW、品牌、卖家、竞品 8 个维度）。触发词：市场调研、市调、market research、分析这个类目。 It is an AI Agent Skill for Claude Code / OpenClaw, with 92 downloads so far.
How do I install LinkFox Market Research?
Run "/install linkfox-market-research" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is LinkFox Market Research free?
Yes, LinkFox Market Research is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does LinkFox Market Research support?
LinkFox Market Research is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created LinkFox Market Research?
It is built and maintained by jiafar (@jiafar); the current version is v1.0.0.
More Skills