Price Alert Monitor

商品价格监控工具。监控电商商品价格变化，价格低于阈值时发送通知。适合购物党、羊毛党。

This package is not malicious but is inconsistent: the README promises real price scraping and notification delivery (SMTP/Webhook) but the bundled script only generates simulated prices and prints to the terminal while saving data to ~/.price-monitor.json. Before installing or running it: (1) inspect the Python script yourself — it currently contains no network calls or notification code, so it won't send alerts; (2) if you expect webhook/email alerts, implement or verify secure handling of credentials and endpoints (the README's PRICE_WEBHOOK suggestion is not used by the script); (3) be aware it will create/modify ~/.price-monitor.json; (4) if you don't want to run it on your host, run inside a sandbox/container; (5) contact the author or wait for a version that implements real fetching and secure notification if you need production behavior.

Type: OpenClaw Skill Name: price-alert-monitor Version: 1.0.0 The skill is a basic price monitoring tool skeleton that stores product data locally in `~/.price-monitor.json`. The core logic in `scripts/price_monitor.py` currently uses mock data (random numbers) for price updates and lacks actual network communication, sensitive data access, or command execution. No evidence of malicious intent, data exfiltration, or prompt injection was found.