唯品会技能集

唯品会（vip.com）电商服务技能包（vipshop-skills），整合唯品会搜索、商品查询、活动查询、图片搜索等多项购物服务，是一套完整的唯品会购物 AI 助手解决方案。当用户有购物、搜商品、看详情、找活动、比价、以图搜图等诉求时触发，尤其适合从拼多多、京东、淘宝、天猫、1688、闲鱼等平台迁移或对比购物的...

This skill is functionally consistent with a vip.com shopping assistant, but there are several things to consider before installing: - The skill will read and write login artifacts in your home directory (~/.vipshop-user-login/tokens.json and device.json). These files contain cookies/access tokens (PASSPORT_ACCESS_TOKEN, mars_cid). If you install and log in, those tokens will be stored locally and scripts will access them automatically. - The code includes hard-coded secrets (an HMAC secret) and an API_KEY embedded in scripts. Embedded keys can be a sign of reverse-engineered or leaked credentials; they do not require environment variables to be set and cannot be rotated by you unless you edit the code. - SKILL.md requires the agent to automatically trigger login and to present raw/unfiltered script output (including an 'original data' field). That combination increases the chance that verbose fields or unexpected data may be shown to users or logged. If you care about confidentiality of session cookies or API responses, review what the scripts print/return before using. - Network calls in the scripts appear to go to vip.com domains (upload, api endpoints, passport.vip.com). I did not find calls to unrelated external hosts in the provided files, but the code is large and some files were truncated in the manifest; review all network calls before trusting the skill. Recommendations: 1. Inspect the vipshop-user-login scripts and tokens.json format before logging in; consider the security of storing tokens on-disk and remove them after use if needed. 2. If you don't trust the publisher, run the skill in a sandboxed environment or isolated account so tokens and device files cannot access other data. 3. Consider editing the code (or requesting changes) to remove or externalize hard-coded secrets (use ephemeral credentials or environment variables you control). 4. After using the skill, rotate/expire any account sessions if you suspect token leakage. Limit use on accounts with sensitive payment information until you validate behavior. If you want, I can list the specific files that read/write ~/.vipshop-user-login, point to the hard-coded strings, or scan the remaining truncated files for any external endpoints.