← Back to Skills Marketplace
508
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install xianyu-sam-order
Description
闲鱼山姆代下单 - 配置你自己的账号
Usage Guidance
Before installing or using this skill: (1) be cautious about placing session cookies in a plaintext ~/.openclaw/workspace/.env file — prefer the platform's secret storage or avoid providing cookies entirely; (2) note that the package metadata does not list the XIANYU_COOKIE or SAM_PHONE env vars even though the README asks you to set them — ask the author to fix this mismatch; (3) the included script only prints checks and help (it doesn't appear to exfiltrate data), but only provide sensitive credentials if you trust the skill/author and have verified how those credentials are used; (4) if you don't need automation, use the manual workflow to avoid sharing cookies.
Capability Analysis
Type: OpenClaw Skill
Name: xianyu-sam-order
Version: 1.0.1
The skill requests users to store sensitive session information, specifically a Xianyu cookie (`XIANYU_COOKIE`), in a local environment file as described in SKILL.md. While the provided script `scripts/order.py` only checks for the presence of these variables and prints status messages locally without performing network calls or exfiltration, the handling of raw session cookies is a high-risk practice that could lead to account compromise if the environment is accessed by other processes.
Capability Assessment
Purpose & Capability
The skill's purpose (assist with Xianyu/Sam orders) matches the included helper script which only checks environment variables and prints instructions. However the registry metadata declares no required environment variables, while the runtime instructions explicitly ask the user to populate XIANYU_COOKIE and SAM_PHONE. That metadata/instruction mismatch is inconsistent.
Instruction Scope
SKILL.md stays within the stated purpose (login guidance, manual/optional automation). It tells users to store their cookie and phone in ~/.openclaw/workspace/.env and to take screenshots — it does not instruct the agent to read arbitrary system files or to send data to external endpoints. The instructions do encourage storing sensitive cookies in a local .env file, which is a security concern worth noting.
Install Mechanism
No install spec and only a tiny local Python script are included, so there is no network-based installer or downloaded code to evaluate. This is low risk from an install-mechanism perspective.
Credentials
The skill asks users (in SKILL.md) to provide XIANYU_COOKIE and SAM_PHONE to enable optional automation. Requesting those two items is proportionate to optional auto-login, but the registry metadata does not declare them, and the guidance encourages storing a session cookie in a plain .env file in the workspace — which may expose sensitive session credentials if the file is not protected.
Persistence & Privilege
The skill is not always-enabled and does not request special platform privileges. It does not attempt to modify other skills or system settings. Normal autonomous invocation is allowed (platform default).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xianyu-sam-order - After installation, invoke the skill by name or use
/xianyu-sam-order - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Updated documentation to guide users on configuring their own Sam’s Club and Xianyu accounts.
- Added instructions for setting personal account information in the `.env` file.
- Streamlined service description and usage, focusing on self-ordering and authentication requirements.
- Simplified trigger phrases and clarified FAQ for user self-service scenarios.
v1.0.0
xianyu-sam-order v1.0.0
- Initial release of the skill.
- Enables users to order or request Sam's Club products for home delivery.
- Supports triggers such as “山姆下单”, “山姆代购”, and “闲鱼山姆”.
- Provides product price ranges, order flow, and fee details.
- Offers contact methods for service.
Metadata
Frequently Asked Questions
What is Xianyu Sam Order?
闲鱼山姆代下单 - 配置你自己的账号. It is an AI Agent Skill for Claude Code / OpenClaw, with 508 downloads so far.
How do I install Xianyu Sam Order?
Run "/install xianyu-sam-order" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Xianyu Sam Order free?
Yes, Xianyu Sam Order is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Xianyu Sam Order support?
Xianyu Sam Order is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Xianyu Sam Order?
It is built and maintained by SxLiuYu (@sxliuyu); the current version is v1.0.1.
More Skills