← Back to Skills Marketplace
z4201812

1688 To Ozon

by z4201812 · GitHub ↗ · v1.0.71 · MIT-0
cross-platform ⚠ suspicious
163
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install 1688-to-ozon
Description
1688 商品自动采集并上传到 OZON 平台
README (SKILL.md)

1688-to-OZON

将 1688 商品自动采集并上传到 OZON 电商平台。

版本: v1.0.71
最后更新: 2026-04-06


快速开始

# 基本用法
node scripts/index.js "URL" -w 重量 -p 采购价

# 示例
node scripts/index.js "https://detail.1688.com/offer/xxx.html" -w 300g -p 14

参数说明

参数 简写 必需 说明 默认值
URL - 1688 商品链接 -
--weight -w 商品重量(100g, 0.5kg) -
--purchase-price -p 采购价(人民币) -
--shipping -s 国内运费 0
--profit - 利润率(小数) 0.2
--category - OZON 类目 toy_set
--log -l 实时进度输出(主代理捕获发送飞书) false
--debug - Debug 模式(Mock数据) false
--pause - 上传前暂停确认 false
--step - 从第几步开始(1-4) 1

执行流程

Step 1: 1688 商品抓取 → 提取主图+详情图+文案
Step 2: 图片翻译 → 中文→俄文,上传图床
Step 3: 定价计算 → 物流+佣金+利润
Step 4: OZON 上传 → API上传+库存设置

示例

# 完整参数
node scripts/index.js "URL" -w 1.6kg -p 70 --profit 0.25 -l

# 简单参数
node scripts/index.js "URL" -w 300g -p 14

# Debug 模式
node scripts/index.js "URL" -w 100g -p 30 --debug

# 暂停确认
node scripts/index.js "URL" -w 100g -p 30 --pause

配置

配置文件:config/config.jsonconfig/user.json

{
  "ozon": {
    "clientId": "your-client-id",
    "apiKey": "your-api-key"
  },
  "pricing": {
    "defaultProfit": 0.2
  }
}

版本历史

  • v1.0.71 (2026-04-06) - 按 OpenClaw 规则重新整理 SKILL.md
  • v1.0.70 (2026-04-05) - 移除标签格式修复代码
  • v1.0.69 (2026-04-05) - 修复标签和富文本上传失败
Usage Guidance
What to check before installing/using this skill: - Review and rotate credentials: the repo includes cleartext API keys (config/config.json) and hardcoded Feishu app secret in the code. Treat these as sensitive — replace with your own keys or remove them and set them via environment variables before use. - Verify endpoints and accounts: the workflow uses multiple external services (Baidu OCR, Xiangji/translator, ImgBB, DashScope LLM, OZON). Confirm you control the accounts and understand billing/data-sharing policies for each. - Isolate workspace and temp files: the skill writes results into shared workspace directories and temp files. Run it in an isolated workspace or container to avoid leaking scraped product data to other agents/users on the same host. - Understand the LLM pattern: copywriting.js intentionally throws a prompt-containing error to get the agent to run an LLM and write results to disk. That means extracted product text may be included in prompts sent to whatever LLM service you use — review the prompt template and avoid sending data you don’t want transmitted. - Test in debug/mock mode first: use --debug to run with mock data and verify behavior (and that notifications are disabled) before processing real listings. - Remove or replace hardcoded notification credentials: the script sets FEISHU_APP_ID/SECRET when -l is used. If you enable logging/notifications, configure your own app credentials or disable notification features. If you are not comfortable with embedded secrets and automatic external LLM/third‑party calls, do not run this skill in production until you have removed secrets, read the source of the large scripts (especially upload.js, map.js, and copywriting.js), and tested in an isolated environment.
Capability Analysis
Type: OpenClaw Skill Name: 1688-to-ozon Version: 1.0.71 The skill bundle contains multiple hardcoded sensitive API keys for OZON, Baidu OCR, DashScope, and Feishu within `config/config.json` and `scripts/lib/logger.js`. Most notably, the `--log` feature in `scripts/index.js` intentionally overwrites Feishu environment variables with hardcoded credentials, forcing the transmission of product data, pricing, and execution status to a specific Feishu chat ID (`oc_57bd4ab12e061043ec6d4f3805332b83`) regardless of user configuration. Additionally, the scripts frequently use `execSync` to execute shell commands via `curl` and `agent-browser`, which presents a significant risk of shell injection if inputs are not strictly sanitized.
Capability Tags
cryptocan-make-purchasesrequires-oauth-token
Capability Assessment
Purpose & Capability
Name and description match the code and workflow: the scripts crawl 1688, translate/host images, compute pricing and upload via OZON API. Requiring node and agent-browser is reasonable for a web-scraping + automation skill. However there is a small incoherence: SKILL metadata declares no required env vars, yet the code and config include many API keys (OZON, Baidu OCR, translator, ImgBB, DashScope LLM) and the code uses environment-variable overrides — the documentation doesn't clearly declare these runtime secrets as required.
Instruction Scope
The runtime instructions call node scripts that perform crawling, OCR, translation, image hosting and API uploads — all within the described scope. Concerning patterns: the copywriting module writes data to temp files then deliberately throws an error containing a prompt asking the agent to invoke an LLM and save results to a temp path (i.e., it offloads LLM generation to the agent via a prompt embedded in an exception). The main script also sets Feishu app ID/secret in process.env when the -l flag is used. These behaviors broaden what the agent will do at runtime (external LLM/third‑party calls, file writes in system temp/workspace) and create opportunities for sensitive data to be transmitted outside the local environment.
Install Mechanism
There is no install spec (instruction-only in SKILL.md), so nothing is downloaded or executed at install time beyond the provided code. The presence of many local JavaScript files means execution happens when the user runs the script, not during installation. That lowers install-time risk; still review the source files before running.
Credentials
The repository contains numerous credentials in config/config.json (OZON API key, Baidu OCR keys, DashScope LLM key, ImgBB key, translator keys, etc.) and the code hardcodes Feishu app secret values when logging is enabled. The skill does not declare these required env vars in the metadata, yet loadConfig supports overriding via env vars. Requiring multiple unrelated third‑party API keys is proportionate to the multi-service workflow, but embedding secrets in the repo and setting service credentials in-process is risky and inconsistent with the SKILL.md claim of 'required env vars: none.'
Persistence & Privilege
The skill does not request always:true and does not modify other skills. It writes outputs to shared workspace directories (~/.../projects/) and temporary files (os.tmpdir), which are shared locations per the README; that can leak extracted product data between agents/users if workspaces are not isolated. The skill also prints progress messages intended to be captured by the host agent (and may attempt Feishu notifications).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install 1688-to-ozon
  3. After installation, invoke the skill by name or use /1688-to-ozon
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.71
- SKILL.md has been reorganized to follow OpenClaw standards. - No functional changes to the skill's behavior.
Metadata
Slug 1688-to-ozon
Version 1.0.71
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is 1688 To Ozon?

1688 商品自动采集并上传到 OZON 平台. It is an AI Agent Skill for Claude Code / OpenClaw, with 163 downloads so far.

How do I install 1688 To Ozon?

Run "/install 1688-to-ozon" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 1688 To Ozon free?

Yes, 1688 To Ozon is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 1688 To Ozon support?

1688 To Ozon is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 1688 To Ozon?

It is built and maintained by z4201812 (@z4201812); the current version is v1.0.71.

💬 Comments