← Back to Skills Marketplace
simsq

科力普采购助手

by 阿强哥 · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
156
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install colipu-procurement
Description
Colipu (科力普) B2B procurement API integration for enterprise purchasing. Provides product search by SKU/keyword, pricing and stock queries, order creation and...
README (SKILL.md)

\r \r

Colipu 科力普采购助手\r

\r Enterprise B2B procurement API client for Colipu (科力普).\r Covers the full procurement lifecycle: product lookup, ordering, logistics, billing, and after-sales.\r \r

Prerequisites\r

\r

  1. Get API credentials: Contact [email protected] for business cooperation and account setup.\r \r
  2. Environment variables (required before first use):\r
    • COLIPU_USERNAME — API account username\r
    • COLIPU_PASSWORD — API account password\r
    • COLIPU_BASE_URL — optional, defaults to https://api.ucip.colipu.com/cip\r
    • COLIPU_TOKEN_FILE — optional, token cache file path (used only when persistence is enabled)\r
    • COLIPU_TOKEN_PERSIST — optional, defaults to 0; set to 1 to enable token disk persistence\r \r
  3. Python with requests available in the current environment.\r \r
  4. Token is auto-fetched and kept in memory by default (12 h TTL, auto-refresh).\r To persist token on disk, explicitly set both COLIPU_TOKEN_PERSIST=1 and COLIPU_TOKEN_FILE=/secure/path/colipu_token.json.\r Avoid storing token files in shared, synced, or backed-up workspace directories.\r \r

Core Rules\r

\r

  1. Never fabricate data — always call the API; never guess prices, stock, or order status.\r
  2. Never use web_search as a substitute for API data.\r
  3. Ask for missing params — if SKU, order ID, or date range is missing, ask the user before calling.\r
  4. SKU format — alphanumeric, case-sensitive, use lowercase (e.g. 2h1075, 1049204).\r
  5. All commands run via: python scripts/colipu_client.py \x3Ccommand> [args]\r
  6. On any API error: show errormsg to the user and suggest a corrective action.\r \r

Task Router\r

\r Match user intent to the command below, then execute.\r \r

Product\r

\r | Intent | Command | Required Args |\r |--------|---------|---------------|\r | Browse categories | categories | — |\r | Product detail | product-detail | --sku SKU |\r | Check price | product-price | --skus SKU1,SKU2 |\r | Check stock | product-stock | --skus SKU1 --area CODE |\r \r

  • Area code format: 省编号_市编号_区编号, use * for all regions.\r
  • --customer-code is optional on price/stock queries.\r \r

Order\r

\r | Intent | Command | Required Args |\r |--------|---------|---------------|\r | Place order | order-submit | --data order.json or --json '{...}' |\r | Confirm order | order-confirm | --order-id ID |\r | Cancel order | order-cancel | --order-id ID |\r | Query order detail | order-info | --order-id ID |\r | Query order status | order-state | --order-id ID |\r | Confirm receipt | order-signconfirm | --order-id ID |\r \r

Logistics\r

\r | Intent | Command | Required Args |\r |--------|---------|---------------|\r | Track by order | logistics | --order-id ID |\r | Track by delivery | delivery-logistics | --delivery-code CODE |\r \r

Billing & Invoice\r

\r | Intent | Command | Required Args |\r |--------|---------|---------------|\r | Reconciliation | bill-reconciliation | --start-date YYYY-MM-DD --end-date YYYY-MM-DD |\r | Apply for settlement | bill-apply | --data bill.json |\r \r

After-sales\r

\r | Intent | Command | Required Args |\r |--------|---------|---------------|\r | Apply return/exchange | aftersale-apply | --data return.json |\r | Query return status | aftersale-info | --apply-code CODE |\r | Cancel return | aftersale-cancel | --apply-code CODE |\r \r

Messages\r

\r | Intent | Command | Required Args |\r |--------|---------|---------------|\r | Get messages | messages | --type 302,303 |\r | Delete messages | message-delete | --ids ID1,ID2 |\r \r Message type codes: 202=price change, 203=stock change, 204=on/off shelf,\r 205=product change, 206=product pool change, 302=order status, 303=return status,\r 304=return audit, 700=bill audit, 701=bill invoice, 801=order split.\r \r

Workflow: Product Inquiry\r

\r

  1. User gives SKU → product-detail --sku \x3Csku> for full info.\r
  2. User wants price → product-price --skus \x3Csku1,sku2> returns 协议价/商城价/市场价.\r
  3. User wants stock → product-stock --skus \x3Csku> --area \x3Ccode>.\r
  4. User gives keyword only → categories first, then look up SKUs within a category\r (see category/{id}/skus in references/product.md).\r \r

Workflow: Order Lifecycle\r

\r

Submit ──→ Confirm ──→ Ship ──→ Deliver ──→ Sign receipt\r
  │           │                                  │\r
  └→ Cancel   └→ Revoke                 Reconcile / Invoice\r
                                                 │\r
                                         After-sales return\r
```\r
\r
1. **Submit**: Build order JSON (required: `yggc_order`, `name`, province/city/county,\r
   `address`, `phone`/`mobile`, `payment`, `order_price`, `freight`, `sku` array).\r
   See [references/order.md](references/order.md) for full field spec.\r
   Run `order-submit --data order.json`.\r
2. **Confirm**: `order-confirm --order-id \x3Cid>` — supports whole-order or partial confirm.\r
3. **Track**: `order-state --order-id \x3Cid>` for status code; `logistics --order-id \x3Cid>` for tracking.\r
4. **Cancel** (before shipping only): `order-cancel --order-id \x3Cid>`.\r
5. **Sign receipt**: `order-signconfirm --order-id \x3Cid>`.\r
\r
Order status codes: `0`=新建, `1`=签收, `-1`=拒收, `-2`=取消, `5`=发货, `3`=审批通过, `-3`=审批不通过.\r
\r
## Workflow: After-sales Return\r
\r
1. Build return JSON: `order_id` (required), `skus` array (`sku`/`num`/`price`),\r
   `apply_type` (`4`=退货, `5`=换货, `6`=维修, `7`=退款).\r
2. Submit: `aftersale-apply --data return.json`.\r
3. Track: `aftersale-info --apply-code \x3Ccode>`.\r
4. Cancel if needed: `aftersale-cancel --apply-code \x3Ccode>`.\r
\r
Return audit status: `0`=待审核, `1`=审核通过, `2`=客户取消, `3`=客服取消, `4`=审核不通过.\r
\r
## Error Handling\r
\r
All responses follow: `{success, errorcode, errormsg, requestId, result}`.\r
\r
| Code | Meaning | Suggested Action |\r
|------|---------|------------------|\r
| 0 | Success | Proceed normally |\r
| 5001 | Token expired | Client auto-refreshes; retry once |\r
| 5003 | Refresh token expired | Re-authenticate (client handles this) |\r
| 5004 | No data found | Tell user "no results found" |\r
| 5005 | Invalid params | Verify and correct parameters |\r
| 2060 | Duplicate order | Use a different order number |\r
| 2061 | Order not found | Verify order ID with user |\r
| 2062 | Order already confirmed | Inform user, no action needed |\r
| 2063 | Order already cancelled | Inform user, no action needed |\r
| 2065 | Submitting too fast | Wait briefly, then retry |\r
\r
## Output Format\r
\r
Present API results to users in a clear structured format:\r
\r
- **Product**: Name / SKU / Price (协议价 · 商城价 · 市场价) / Stock / Brand / Unit\r
- **Order**: Order ID / Status / Total amount / SKU list / Receiver / Address\r
- **Logistics**: Carrier / Tracking number / Latest event / Full timeline\r
- **Billing**: Order ID / Status / Create date / Signed amount per SKU\r
- **Return**: Apply code / Audit status / Type / Reason / SKU details\r
\r
## Auth Mechanism\r
\r
Token = `MD5(username + password + timestamp + password)` lowercase hex.\r
Timestamp format: `yyyyMMdd`. TTL: 12 hours.\r
Header on all requests (except token fetch): `Colipu-Token: {access_token}`.\r
\r
The client script handles auth automatically — no manual token management needed.\r
\r
## Troubleshooting\r
\r
| Symptom | Cause | Fix |\r
|---------|-------|-----|\r
| `Error: set COLIPU_USERNAME and COLIPU_PASSWORD env vars` | Env vars not configured | Set both env vars before running |\r
| `Failed to get token: ...` | Wrong credentials or network issue | Verify username/password; check connectivity |\r
| `{"success": false, "errorcode": "-1", ...}` | Network timeout or connection refused | Check internet; retry after a moment |\r
| Token file corrupt / garbled | Previous write interrupted | Delete `.data/colipu_token.json` and retry; client will re-authenticate |\r
| Price / stock returns empty | SKU doesn't exist or wrong case | SKUs are case-sensitive — use lowercase |\r
\r
## Detailed API Reference\r
\r
For full request/response schemas and examples, read the reference files:\r
\r
- Auth & token: [references/auth.md](references/auth.md)\r
- Product & categories: [references/product.md](references/product.md)\r
- Order lifecycle: [references/order.md](references/order.md)\r
- Billing & invoices: [references/billing.md](references/billing.md)\r
- After-sales returns: [references/aftersale.md](references/aftersale.md)\r
- Logistics tracking: [references/logistics.md](references/logistics.md)\r
- Message subscription: [references/message.md](references/message.md)\r
Usage Guidance
This skill largely looks coherent with its stated purpose (Colipu B2B API client) and only needs the Colipu username/password and optional token settings. Before installing: (1) Inspect SKILL.md in a text editor that shows hidden/control characters and remove any unexpected control codes; (2) Verify you trust the skill source (no homepage or known publisher provided); (3) Prefer not to enable COLIPU_TOKEN_PERSIST unless you set COLIPU_TOKEN_FILE to a secure, non-shared path and confirm the script's file-permission behavior is acceptable; (4) Confirm the COLIPU_BASE_URL (defaults to https://api.ucip.colipu.com/cip) with your Colipu contact ([email protected]) if in doubt. If you cannot validate the SKILL.md origin or you find hidden characters, treat the package as untrusted and avoid installing or running it.
Capability Analysis
Type: OpenClaw Skill Name: colipu-procurement Version: 1.0.2 The skill bundle provides a legitimate integration for the Colipu (科力普) B2B procurement API. The Python client (scripts/colipu_client.py) implements standard API interactions for product search, order placement, and logistics tracking using the official endpoint (api.ucip.colipu.com). It follows security best practices by using environment variables for credentials and implementing restricted file permissions (chmod 600) for local token caching. No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Tags
cryptocan-make-purchasesrequires-oauth-tokenrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description, declared env vars (COLIPU_USERNAME, COLIPU_PASSWORD, optional base URL/token persistence), SKILL.md instructions, and the included Python CLI all align with a Colipu B2B API client. No unrelated credentials, binaries, or surprising endpoints are requested; network calls target the documented BASE_URL.
Instruction Scope
Runtime instructions confine the agent to calling the provided CLI (python scripts/colipu_client.py <command>) and to obtaining user-supplied inputs (SKU, order JSON, date ranges). However, an automated scan detected unicode-control-chars in SKILL.md (prompt-injection pattern). That control-character signal is not needed for the documented API integration and could be an attempt to influence the agent or hide content; review the SKILL.md raw text for hidden characters before trusting it.
Install Mechanism
No install spec (instruction-only behavior apart from shipped script) — lowest install risk. The skill includes a Python script that relies on the 'requests' library (SKILL.md documents this) and will exit with instructions if it's missing; no downloads from untrusted URLs or arbitrary remote code execution were found.
Credentials
Requested environment variables are limited and appropriate: username/password for API auth, optional base URL and token persistence options. The script optionally writes a token file if persistence is enabled; the need for token storage is justified by the API design and the skill warns about secure storage.
Persistence & Privilege
The skill does not request permanent platform-wide privileges (always=false). Token persistence is optional and scoped to the provided token file path; the script attempts to set restrictive file permissions (chmod or icacls) if a token file is used. No modifications to other skills or global agent config were observed.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install colipu-procurement
  3. After installation, invoke the skill by name or use /colipu-procurement
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
No functional changes in this release. - Documentation or metadata was updated with no detected code or workflow changes. - No impact to users; all features and usage remain the same.
v1.0.2
colipu-procurement 1.0.2 - Added explicit environment variable requirements and options (`required_env_vars`, `optional_env_vars`) to SKILL.md. - Introduced new token handling options: `COLIPU_TOKEN_PERSIST` (for controlling token file persistence) and clarified usage of `COLIPU_TOKEN_FILE`. - Added a section detailing secret handling in logs, including redaction and echo prevention. - Updated prerequisites to note Python version requirement is now generic; no longer restricts to a specific version. - Provided stronger instructions to avoid storing tokens in shared or synced directories. - No code changes; changes are documentation only.
v1.0.1
科力普(Colipu)企业采购助手,支持商品查询、锁定库存、确认订单、订单管理、售后处理、物流跟踪、发票及对账等全流程采购服务。 适用于企业B2B采购、办公用品采购、电商平台对接等场景。 如需系统对接、平台接入或商务合作,请联系:[email protected]/14790436938
v1.0.0
Colipu Procurement v1.0.0 – Initial Release - Introduces official API integration for the Colipu B2B procurement platform. - Supports full procurement workflow: product queries, order management, aftersale, logistics tracking, billing, and messages. - Provides CLI commands for rapid access to all API functions. - Features detailed error codes, authentication guide, and example usage. - Documentation includes endpoint reference and module breakdown for easy onboarding.
Metadata
Slug colipu-procurement
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is 科力普采购助手?

Colipu (科力普) B2B procurement API integration for enterprise purchasing. Provides product search by SKU/keyword, pricing and stock queries, order creation and... It is an AI Agent Skill for Claude Code / OpenClaw, with 156 downloads so far.

How do I install 科力普采购助手?

Run "/install colipu-procurement" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 科力普采购助手 free?

Yes, 科力普采购助手 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 科力普采购助手 support?

科力普采购助手 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 科力普采购助手?

It is built and maintained by 阿强哥 (@simsq); the current version is v1.0.2.

💬 Comments