← Back to Skills Marketplace
bigmountains

翱象发品

by BigMountains · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
306
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install ax-publish-goods
Description
Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format.
README (SKILL.md)

翱象发品接口

对接翱象(淘宝闪购)零售开放平台,实现商品批量创建功能。

快速开始

Python 版本

from scripts.aoxiang_publish import AoxiangPublishClient

# 创建客户端
client = AoxiangPublishClient(
    app_key="???",
    secret="???"
)

# 构建商品列表
sku_list = [
    {
        "sku_name": "可口可乐 330ml",
        "inventory_unit": "瓶",
        "sku_code": "COLA330001",
        "barcodes": ["6901234567890"],
        "specification": "330ml",
        "sale_price": "350"  # 单位:分
    }
]

# 调用接口
result = client.create_goods(
    merchant_code="ERP_ACCESS_TEST",
    erp_store_code="ERP_NORMAL",
    sku_list=sku_list
)

# 处理结果
if result["body"]["errno"] == 0:
    print("发品成功!")
else:
    print(f"失败: {result['body']['error']}")

命令行使用

# 使用默认示例数据
python3 scripts/aoxiang_publish.py

# 自定义参数
python3 scripts/aoxiang_publish.py "MERCHANT_CODE" "STORE_CODE" '[{"sku_name":"商品","inventory_unit":"个","sku_code":"SKU001","barcodes":["123"],"specification":"规格","sale_price":"100"}]'

API 参数说明

请求参数

参数 类型 必填 说明
cmd string 固定值: saas.sku.create.goods.batch
source string AppKey
secret string 用于签名,不传参只用于签名计算
ticket string 随机生成的UUID格式字符串
timestamp string 10位时间戳
version string 固定值: 3
encrypt string 固定值: 空字符串 ""
body string JSON格式的业务参数
sign string MD5签名(大写)

Body 参数

参数 类型 必填 说明
merchant_code string 商家编码
erp_store_code string 门店编码
sku_list array 商品列表

SKU 参数

参数 类型 必填 说明
sku_name string 商品名称
inventory_unit string 库存单位(个/瓶/盒等)
sku_code string 商品编码(唯一)
barcodes array 条码列表
specification string 规格
sale_price string 售价(单位:

签名算法

  1. 构建签名参数(按 key 字母顺序排序):

    • body, cmd, encrypt, secret, source, ticket, timestamp, version
  2. 拼接成字符串:

    key1=value1&key2=value2&...
    
  3. MD5 加密,转大写32位

响应格式

{
    "body": {
        "errno": 0,
        "data": null,
        "error": "success"
    },
    "cmd": "resp.saas.sku.create.goods.batch",
    "encrypt": "",
    "sign": "...",
    "source": "41389872",
    "ticket": "...",
    "timestamp": 1234567890,
    "traceid": "...",
    "version": "3"
}
  • errno: 0 表示成功
  • errno != 0 表示失败,错误信息在 error 字段

注意事项

  1. 价格单位是"分",不是元(3.5元 = 350分)
  2. sku_code 必须唯一
  3. ticket 是随机生成的UUID格式(带减号)
  4. timestamp 是10位时间戳(秒级)
  5. body 需要转为JSON字符串参与签名

文件列表

  • scripts/aoxiang_publish.py - Python 客户端
  • REFERENCE.md - Java 参考实现
Usage Guidance
This package is inconsistent: its description promises a Java/JAR-based tool but the README shows Python examples and refers to local scripts that aren't included. Before installing or providing credentials, ask the publisher for the missing files (scripts/aoxiang_publish.py, REFERENCE.md, or the openclaw_demo.jar) and an explicit endpoint URL. Do not supply your app_key/secret until you can inspect the actual code that will execute them. If you must test it, run in an isolated environment (container or sandbox) and prefer ephemeral credentials you can revoke. If you can't get a coherent explanation or the source code, treat it as untrusted.
Capability Analysis
Type: OpenClaw Skill Name: ax-publish-goods Version: 1.0.2 The skill bundle provides documentation and a Python interface for integrating with the Aoxiang (Taobao Flash Sale) retail platform API. The provided files (_meta.json and SKILL.md) describe standard e-commerce operations for batch product creation, including MD5 signing logic and parameter specifications, with no evidence of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The top-level description says the skill runs a Java JDK8 openclaw_demo.jar, yet SKILL.md contains only Python usage examples (scripts/aoxiang_publish.py) and references a Java REFERENCE.md — none of these code files exist in the package. This inconsistency between claimed implementation (Java/JAR) and provided instructions (Python, missing scripts) is unexpected and unexplained.
Instruction Scope
SKILL.md documents API parameters, the MD5 signing algorithm, example Python client usage, and CLI invocation. It does not instruct reading unrelated system files or env vars, nor does it include an endpoint URL. However, it references local files (scripts/aoxiang_publish.py, REFERENCE.md) that are not present in the package, making the runtime behavior unclear. The signing description is slightly ambiguous about whether 'secret' is transmitted or only used for signing.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk by the registry. This is low risk from an install-mechanism perspective. The missing referenced files are an availability/integrity issue but not an installation risk.
Credentials
The instructions clearly require an app_key and secret (used for signing) but the skill metadata lists no required environment variables or primary credential. The manifest not declaring these secrets is an omission that makes it unclear how credentials are expected to be provided and audited.
Persistence & Privilege
Default privileges apply (always: false, agent-invocable). The skill does not request persistent or elevated platform presence in the manifest.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install ax-publish-goods
  3. After installation, invoke the skill by name or use /ax-publish-goods
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- 移除了示例中硬编码的 app_key 和 secret 值,改为 "???" 占位符,提升安全性。 - 其余内容保持不变,未检测到功能或文档结构调整。
v1.0.1
- Removed the file REFERENCE.md from the project. - Updated documentation in SKILL.md to provide comprehensive Python usage examples and API parameter explanations. - Improved clarity on how to batch publish goods using the Aoxiang (Taobao Flash Sale) API. - Expanded API details, signature algorithm description, and response format information. - Listed related scripts and clarified usage for both Python and command line.
v1.0.0
Initial release of 翱象发品 Skill. - Requires Java JDK 8 environment. - Usage involves building openclaw_demo.jar from the provided Java code. - Supports batch creation of goods (sku) via the command line. - Includes clear request parameter specification and usage example.
Metadata
Slug ax-publish-goods
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is 翱象发品?

Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format. It is an AI Agent Skill for Claude Code / OpenClaw, with 306 downloads so far.

How do I install 翱象发品?

Run "/install ax-publish-goods" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 翱象发品 free?

Yes, 翱象发品 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 翱象发品 support?

翱象发品 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 翱象发品?

It is built and maintained by BigMountains (@bigmountains); the current version is v1.0.2.

💬 Comments