Price

Track prices, analyze historical and total costs, detect manipulation, set alerts, and advise on optimal purchase timing for consumers and businesses.

This skill appears to be a legitimate price-tracking assistant, but several things are unclear and worth confirming before installing: - Data sources and credentials: The instructions list Keepa, CamelCamelCamel, Google Flights, etc. Some of these require API keys or paid plans. Ask the publisher how the skill will access those sources and whether you need to provide API keys (none are declared). If the skill scrapes pages, verify that behavior is acceptable. - Background monitoring & notifications: The SKILL.md says it will 'poll price periodically' and 'notify when hit' but there is no install/spec for a background process or notification channel. Confirm how alerts are delivered (email, push, agent notifications) and whether the skill will run autonomously. - Local storage & privacy: The skill will store watchlists, histories, alerts, and purchases under ~/price/. That may include sensitive transaction history. Confirm retention, where files are stored, and whether they are encrypted or exported/shared anywhere. - Permissions you expect: Because the skill can fetch external pages and write to home directory, only install if you trust the agent to access the network and manage local files. If you require stricter guarantees (no scraping, only API usage with your credentials, or no persistent logging), request an updated skill manifest that declares required env vars and an explicit install/run model. If the publisher can clarify how data sources are accessed, how alerts are delivered, and provide an option that requires you to supply any API keys explicitly, that would reduce ambiguity and should move this to 'benign'.

Type: OpenClaw Skill Name: price Version: 1.0.0 The skill bundle is benign. All described operations, including file system interactions within the `~/price/` directory and network requests to various price tracking and e-commerce platforms (e.g., Amazon, Google Flights, Keepa, StockX), are directly aligned with its stated purpose of price tracking and analysis. There are no instructions for the AI agent to access sensitive system areas, exfiltrate data, establish persistence, or execute arbitrary commands. The markdown files serve as legitimate instructions and knowledge bases for the agent, without any evidence of prompt injection attempts or malicious intent.