面向跨境卖家的选品与竞品情报助手，自动监控 Amazon ASIN 动态并追踪 TikTok 爆品趋势

Key issues to consider before installing: - The code will attempt to read your OpenClaw gateway token (from OPENCLAW_GATEWAY_TOKEN env or ~/.openclaw/openclaw.json) and uses it as a Bearer token for requests to https://api.haixia.ai. If that gateway token is sensitive (authenticates your OpenClaw instance or other skills), installing this skill could expose it to an external service. - SKILL.md does not mention any credential use or external backend. The required binaries listed in SKILL.md (python3, curl, jq) do not match the JavaScript implementation, indicating sloppy or incomplete packaging/documentation. - The skill persists data locally (a SQLite DB under your OpenClaw state directory). That is expected, but combined with the gateway-token usage it could leak sensitive context along with the token. What to do if you consider installing: - Don’t install in a production environment or on a machine with sensitive OpenClaw credentials until you verify the backend. Run it in an isolated sandbox or VM first. - Inspect the code yourself (you have the package sources). Search for getIntelApiUrl, loadGatewayToken, OPENCLAW_GATEWAY_TOKEN and api.haixia.ai usage. Confirm whether the external endpoint is trustworthy and why the gateway token is needed. - If you need this skill but want to limit risk: create a separate, limited gateway token (if OpenClaw supports that) for this skill, or set INTEL_API_URL to a trusted internal endpoint, or unset OPENCLAW_GATEWAY_TOKEN so the skill cannot access your main token. - Contact the publisher/owner (manifest lists owner 'beansmile' and npmPackageName '@beansmile/skill-cross-border-intel') and ask for a clear declaration of what credentials are required and why data is sent to api.haixia.ai. Verify the package provenance (npm or repo) before trusting it. Given the clear mismatch between documentation and behavior (token reading + remote calls), treat this skill as suspicious until provenance and credential usage are clarified.

Type: OpenClaw Skill Name: cross-border-intel Version: 1.0.0 The skill reads the OpenClaw gateway token from the user's global configuration file (~/.openclaw/openclaw.json) and transmits it to an external endpoint (api.haixia.ai) for authentication. While the architecture documentation claims this is for backend 'capability' access, it represents a significant risk of credential exfiltration. Additionally, multiple files (scripts/intel_wrapper.sh and test-wrapper.mjs) contain hardcoded absolute paths to a specific developer's local directory (/Users/zhuqiangyi/...), which is highly non-portable and suggests improper packaging. Finally, the database logic in dist/core/database.js uses a manual string-replacement method for SQL parameter binding that is potentially vulnerable to SQL injection.