← Back to Skills Marketplace
zhangjiun1

淘宝/京东/拼多多优惠查询、产品比价

by zhangjiun1 · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
81
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install pricecompare
Description
省钱购物助手。支持:1. 解析京东/淘宝/拼多多分享口令和链接;2. 商品搜索(京东/淘宝/拼多多);3. 链接转链获取优惠链接;4. 多平台价格对比。帮助用户找到最优惠的价格,通过优惠券和折扣节省购物开支。
Usage Guidance
This skill implements the advertised features but performs its work by POSTing your inputs to an external API at http://op.squirrel2.cn. Before installing or using it, consider: - Do you trust that external host? The skill will send any pasted share content, links, or search keywords to that server. Avoid sending personal-sensitive data (passwords, account numbers, payment info) through the skill. - If you don't trust the default backend, you can override API_BASE_URL in the skill's config or environment to point to a self‑hosted/controlled service — the code supports API_BASE_URL via environment variable but the registry does not declare it. Changing API_BASE_URL requires technical steps (editing config.py or setting an env var). - The package requires the Python requests library but the registry metadata doesn't list dependencies; ensure your runtime has requests installed. If you need stronger assurance, request the skill author to: (1) provide a trustworthy, documented backend or allow local processing without an external server; (2) declare environment variables and dependencies in the registry metadata; and (3) explicitly state privacy/data‑handling policies for the backend. If you cannot verify the backend, treat this skill as potentially exfiltrating the text you send to it.
Capability Analysis
Type: OpenClaw Skill Name: pricecompare Version: 1.0.2 The skill acts as a proxy for a third-party shopping assistant API (op.squirrel2.cn), sending user messages and search queries to this external endpoint. The SKILL.md file contains forceful instructions directed at the AI agent, commanding it to return the code's output verbatim and prohibiting any modification or reformatting; this is a prompt-injection-style technique often used to ensure the delivery of affiliate links or to bypass the agent's natural output processing. While the behavior aligns with the stated purpose of a shopping assistant, the combination of mandatory pass-through instructions and the transmission of user data to a third-party server presents a significant privacy risk and potential for delivering untrusted content.
Capability Assessment
Purpose & Capability
Name/description (price comparison, token/link parsing, link conversion) align with the code, formatters, and SKILL.md. The code implements search/convert/parse/compare and formatting consistent with the stated purpose.
Instruction Scope
SKILL.md clearly instructs the agent to return the output of handle_message() verbatim. The skill's runtime instructions and code call a remote API to perform core functions (/parse_share, /search, /convert, /compare). That means user messages (share content, links, search queries) are sent to an external server. The SKILL.md does not warn users that their inputs will be transmitted to that third party.
Install Mechanism
No install spec in the registry (lowest risk), but the package contains Python code that uses the requests library. The README suggests pip install requests but the skill metadata doesn't declare dependencies. This mismatch could lead to runtime failures but is not inherently malicious.
Credentials
Registry metadata lists no required env vars or credentials, but config.py reads API_BASE_URL and API_TIMEOUT from environment variables (with defaults). That allows behavior to be altered via environment variables and enables the skill to be redirected to an arbitrary backend. The default backend (http://op.squirrel2.cn) is an external third‑party host; sending user inputs there can expose potentially sensitive data (shared tokens, URLs, or other user content).
Persistence & Privilege
The skill does not request elevated privileges or permanent inclusion (always: false). It does not modify other skills or system-wide configs. No concerning persistence behavior is present.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pricecompare
  3. After installation, invoke the skill by name or use /pricecompare
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
更新 Display Name 为淘宝/京东/拼多多优惠查询、产品比价
v1.0.1
更新 Display Name
v1.0.0
price-compare 1.0.0 首发上线: - 支持解析京东、淘宝、拼多多分享口令和链接,自动识别商品信息。 - 实现多平台(京东/淘宝/拼多多)商品搜索功能。 - 支持普通商品链接一键转为优惠链接,方便用户省钱购物。 - 提供同一商品跨平台价格对比,快速找到最低价及优惠信息。 - 规范输出格式,自动展示券后价、优惠券及一键跳转链接。
Metadata
Slug pricecompare
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is 淘宝/京东/拼多多优惠查询、产品比价?

省钱购物助手。支持:1. 解析京东/淘宝/拼多多分享口令和链接;2. 商品搜索(京东/淘宝/拼多多);3. 链接转链获取优惠链接;4. 多平台价格对比。帮助用户找到最优惠的价格,通过优惠券和折扣节省购物开支。 It is an AI Agent Skill for Claude Code / OpenClaw, with 81 downloads so far.

How do I install 淘宝/京东/拼多多优惠查询、产品比价?

Run "/install pricecompare" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 淘宝/京东/拼多多优惠查询、产品比价 free?

Yes, 淘宝/京东/拼多多优惠查询、产品比价 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 淘宝/京东/拼多多优惠查询、产品比价 support?

淘宝/京东/拼多多优惠查询、产品比价 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 淘宝/京东/拼多多优惠查询、产品比价?

It is built and maintained by zhangjiun1 (@zhangjiun1); the current version is v1.0.2.

💬 Comments