一个自动化的菲律宾海关编码（HS Code）查询工具，帮助出口商快速找到正确的商品分类编码。｜

Query Philippines customs HS codes for products exported to the Philippines. Use when user asks about "菲律宾海关编码", "HS code Philippines", "tariff code", "custo...

This skill appears to implement HS-code lookup by downloading tariff PDFs and searching them, but there are a few red flags to consider before running it: - Missing dependency declarations: you must install Python deps (pdfplumber, playwright) and install Playwright browsers; the scripts also call curl or wget. The registry metadata does not list these, so check and install them manually. - Image support claim is misleading: SKILL.md promises product image input, but there is no image-recognition code or library included. Expect only text-based lookup unless you add an image analyzer. - It opens a browser (Playwright) and downloads files (Google Drive / government site) to disk. Run the tool in a controlled environment (non-root user, isolated VM or container) if you are not comfortable with automated browsing and file downloads. - Review the code yourself (or run with dry-run / suggest-only options) to confirm behavior. If you will run this in production or on sensitive hosts, validate Playwright's Chromium download and the exact download destinations, and avoid running with elevated privileges. If you trust the source and accept installing Playwright & pdfplumber, this tool is plausible for its stated use. If you are unsure, request a version with explicit install metadata and a clear image-handling implementation before installing.

Type: OpenClaw Skill Name: ph-hs-code-finder Version: 1.0.0 The ph-hs-code-finder skill bundle is a legitimate tool designed to help users find Philippines customs HS codes. It automates the process of navigating the official Tariff Commission website, identifying relevant chapters, downloading PDFs from Google Drive (where the commission hosts them), and searching for keywords using pdfplumber. The scripts (get_chapter_pdf.py, search_hs_code.py, etc.) use Playwright and subprocess calls to curl/wget for functional purposes related to the stated task, and no evidence of data exfiltration, persistence, or malicious prompt injection was found.