← Back to Skills Marketplace
127
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install rebate-assistant
Description
返利宝统一技能。只按 3 个用户场景工作：S01 授权与教程、S02 链接返利、S03 商品搜索。用户说“返利”“教程”“详细教程”“提现教程”“提现10元”“确认提现”“我已授权”“账户余额”等走 S01；发送淘宝、京东、拼多多商品链接走 S02；表达想买什么商品时走 S03。S03 的职责是提取商品搜索信息，...
Usage Guidance
This skill appears to implement a rebate/link-generation product and will: 1) call included node scripts, 2) send user-provided messages and product links to a backend service, and 3) instruct users to visit external auth/follow pages (xiaomaxiangshenghuo.io.mlj130.com). Before installing, verify: (a) who operates the backend (there's no homepage or clear owner info in the registry), (b) the exact API endpoints used (check scripts/common.js to find base URLs), and (c) privacy implications—your raw messages, product links, and any tokens returned by the backend may be transmitted or displayed verbatim. If you don't trust the backend domain or operator, do not install. If you proceed, consider running the skill in a controlled environment, inspect network traffic during authorization, and avoid sending any PII you don't want shared with the remote service.
Capability Analysis
Type: OpenClaw Skill
Name: rebate-assistant
Version: 1.0.2
The 'rebate-assistant' skill is a comprehensive e-commerce tool designed to help users find products and generate rebate links for platforms like Taobao, JD, and Pinduoduo. It features a multi-stage intent recognition system using both rule-based logic and LLM calls (via scripts/productSearch.js and scripts/recognizePreciseProductSearch.js) to process user requests. While the skill accesses sensitive local data like the OpenClaw device ID and model configurations (scripts/common.js) and performs network requests using curl to interact with its backend (rebate-skill.io.mlj130.com), these actions are functionally necessary for its stated purpose of managing user sessions, resolving product links, and facilitating commission withdrawals. No evidence of malicious intent, such as credential theft or unauthorized data exfiltration, was found.
Capability Assessment
Purpose & Capability
The skill's name/description (rebate/link search + product search) aligns with the included scripts: link recognition, product intent extraction, search, adzone lease, rebate link creation and withdraw flows. However the skill includes hardcoded-looking external URLs (xiaomaxiangshenghuo.io.mlj130.com) used for authorization/follow pages and likely a backend API; there is no public homepage or documentation and the registry owner is not recognizable. That lack of transparency about the backend is a notable omission but functionally consistent with the described purpose.
Instruction Scope
SKILL.md requires the agent to call local CLI JS scripts and return the script stdout verbatim (no editing, no summarization). The scripts perform network calls (search, create rebate link, apply withdraw, resolve short links) and may include user-supplied raw messages and links in requests. Because outputs are returned unmodified, any sensitive tokens/URLs produced by those remote APIs would be shown directly to users. The runtime instructions also save pending auth requests and direct users to external auth pages. The scripts do not appear to read unrelated system files or environment variables, but the enforced verbatim relay of script output increases the risk of unintended disclosure.
Install Mechanism
This is instruction-only in terms of registry install spec (no declared install). The package includes many JS files intended to run under node and the SKILL.md documents an npm build step (npm install; npm run build). That build step would pull dependencies at install time if followed. No external binary downloads are specified in the skill metadata, but executing the scripts will cause outbound network requests at runtime. The lack of an explicit, audited install source (and no homepage) reduces transparency.
Credentials
The skill declares no required environment variables or credentials. Internally it manages a local machine code and local openid binding and enforces user-driven OAuth-like flow via external URLs. It does not request unrelated cloud credentials or secret env vars in the manifest. Still, the runtime will transmit user messages (links, queries) to a remote API/backend, which is proportionate for a rebate/link-generation service but should be disclosed to users.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It persists local bindings (machine code and openid) and writes pending auth requests (best-effort) — behavior consistent with an auth flow. There is no evidence it modifies other skills or system-wide configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install rebate-assistant - After installation, invoke the skill by name or use
/rebate-assistant - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
**提现流程和话术升级：本版本新增提现流程路由与话术，完善对提现场景（如“提现10元”“确认提现”）的识别与处理。**
- S01 场景新增对“提现10元”“确认提现”等提现意图识别，提供提现金额确认与二次确认流程。
- S01 增补 withdraw_prepare、withdraw_confirm 动作及提现流程话术，支持余额校验和失败场景固定回复。
- 路由与示例均覆盖更多提现相关表述，确保提现请求可正确进入 S01 并分步处理。
- 执行硬约束明确：即使脚本失败，已生成的用户文案仍需原样返回。
- 相关文档和调试说明同步更新提现流程及命令参数。
- 其余 S02/S03 用户场景和使用方式未改。
v1.0.1
## rebate-assistant 1.0.1
- No code changes. Documentation only.
- SKILL.md updated for conciseness: removed redundant examples, testing notes, and historical context.
- Reorganized document to focus strictly on the three supported scenarios (S01/S02/S03).
- Clarified routing and output conventions without altering functional logic.
- All main usage flows, constraints, and debugging methods remain the same.
v1.0.0
Initial release of 返利宝技能，聚焦三大用户场景：
- 支持微信授权、操作教程、账户余额等基础引导（S01）。
- 自动识别淘宝、京东、拼多多商品链接并生成返利链接（S02）。
- 智能解析用户购物需求，提取商品搜索信息并调用商品搜索接口返回结果（S03）。
- 往返消息与所有脚本交互严格标准化，输出为 Markdown，杜绝多余话术。
- 全链路统一入口，标准化路由与接口调用，实现“用户只需发商品或需求”。
Metadata
Frequently Asked Questions
What is 返利宝?
返利宝统一技能。只按 3 个用户场景工作：S01 授权与教程、S02 链接返利、S03 商品搜索。用户说“返利”“教程”“详细教程”“提现教程”“提现10元”“确认提现”“我已授权”“账户余额”等走 S01；发送淘宝、京东、拼多多商品链接走 S02；表达想买什么商品时走 S03。S03 的职责是提取商品搜索信息，... It is an AI Agent Skill for Claude Code / OpenClaw, with 127 downloads so far.
How do I install 返利宝?
Run "/install rebate-assistant" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 返利宝 free?
Yes, 返利宝 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 返利宝 support?
返利宝 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 返利宝?
It is built and maintained by wuweizhen (@skyfile); the current version is v1.0.2.
More Skills