← Back to Skills Marketplace
翱象发品
by
BigMountains
· GitHub ↗
· v1.0.2
· MIT-0
306
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install ax-publish-goods
Description
Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format.
README (SKILL.md)
翱象发品接口
对接翱象(淘宝闪购)零售开放平台,实现商品批量创建功能。
快速开始
Python 版本
from scripts.aoxiang_publish import AoxiangPublishClient
# 创建客户端
client = AoxiangPublishClient(
app_key="???",
secret="???"
)
# 构建商品列表
sku_list = [
{
"sku_name": "可口可乐 330ml",
"inventory_unit": "瓶",
"sku_code": "COLA330001",
"barcodes": ["6901234567890"],
"specification": "330ml",
"sale_price": "350" # 单位:分
}
]
# 调用接口
result = client.create_goods(
merchant_code="ERP_ACCESS_TEST",
erp_store_code="ERP_NORMAL",
sku_list=sku_list
)
# 处理结果
if result["body"]["errno"] == 0:
print("发品成功!")
else:
print(f"失败: {result['body']['error']}")
命令行使用
# 使用默认示例数据
python3 scripts/aoxiang_publish.py
# 自定义参数
python3 scripts/aoxiang_publish.py "MERCHANT_CODE" "STORE_CODE" '[{"sku_name":"商品","inventory_unit":"个","sku_code":"SKU001","barcodes":["123"],"specification":"规格","sale_price":"100"}]'
API 参数说明
请求参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
| cmd | string | 是 | 固定值: saas.sku.create.goods.batch |
| source | string | 是 | AppKey |
| secret | string | 是 | 用于签名,不传参只用于签名计算 |
| ticket | string | 是 | 随机生成的UUID格式字符串 |
| timestamp | string | 是 | 10位时间戳 |
| version | string | 是 | 固定值: 3 |
| encrypt | string | 是 | 固定值: 空字符串 "" |
| body | string | 是 | JSON格式的业务参数 |
| sign | string | 是 | MD5签名(大写) |
Body 参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
| merchant_code | string | 是 | 商家编码 |
| erp_store_code | string | 是 | 门店编码 |
| sku_list | array | 是 | 商品列表 |
SKU 参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
| sku_name | string | 是 | 商品名称 |
| inventory_unit | string | 是 | 库存单位(个/瓶/盒等) |
| sku_code | string | 是 | 商品编码(唯一) |
| barcodes | array | 是 | 条码列表 |
| specification | string | 是 | 规格 |
| sale_price | string | 是 | 售价(单位:分) |
签名算法
-
构建签名参数(按 key 字母顺序排序):
- body, cmd, encrypt, secret, source, ticket, timestamp, version
-
拼接成字符串:
key1=value1&key2=value2&... -
MD5 加密,转大写32位
响应格式
{
"body": {
"errno": 0,
"data": null,
"error": "success"
},
"cmd": "resp.saas.sku.create.goods.batch",
"encrypt": "",
"sign": "...",
"source": "41389872",
"ticket": "...",
"timestamp": 1234567890,
"traceid": "...",
"version": "3"
}
errno: 0表示成功errno != 0表示失败,错误信息在error字段
注意事项
- 价格单位是"分",不是元(3.5元 = 350分)
- sku_code 必须唯一
- ticket 是随机生成的UUID格式(带减号)
- timestamp 是10位时间戳(秒级)
- body 需要转为JSON字符串参与签名
文件列表
scripts/aoxiang_publish.py- Python 客户端REFERENCE.md- Java 参考实现
Usage Guidance
This package is inconsistent: its description promises a Java/JAR-based tool but the README shows Python examples and refers to local scripts that aren't included. Before installing or providing credentials, ask the publisher for the missing files (scripts/aoxiang_publish.py, REFERENCE.md, or the openclaw_demo.jar) and an explicit endpoint URL. Do not supply your app_key/secret until you can inspect the actual code that will execute them. If you must test it, run in an isolated environment (container or sandbox) and prefer ephemeral credentials you can revoke. If you can't get a coherent explanation or the source code, treat it as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: ax-publish-goods
Version: 1.0.2
The skill bundle provides documentation and a Python interface for integrating with the Aoxiang (Taobao Flash Sale) retail platform API. The provided files (_meta.json and SKILL.md) describe standard e-commerce operations for batch product creation, including MD5 signing logic and parameter specifications, with no evidence of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The top-level description says the skill runs a Java JDK8 openclaw_demo.jar, yet SKILL.md contains only Python usage examples (scripts/aoxiang_publish.py) and references a Java REFERENCE.md — none of these code files exist in the package. This inconsistency between claimed implementation (Java/JAR) and provided instructions (Python, missing scripts) is unexpected and unexplained.
Instruction Scope
SKILL.md documents API parameters, the MD5 signing algorithm, example Python client usage, and CLI invocation. It does not instruct reading unrelated system files or env vars, nor does it include an endpoint URL. However, it references local files (scripts/aoxiang_publish.py, REFERENCE.md) that are not present in the package, making the runtime behavior unclear. The signing description is slightly ambiguous about whether 'secret' is transmitted or only used for signing.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk by the registry. This is low risk from an install-mechanism perspective. The missing referenced files are an availability/integrity issue but not an installation risk.
Credentials
The instructions clearly require an app_key and secret (used for signing) but the skill metadata lists no required environment variables or primary credential. The manifest not declaring these secrets is an omission that makes it unclear how credentials are expected to be provided and audited.
Persistence & Privilege
Default privileges apply (always: false, agent-invocable). The skill does not request persistent or elevated platform presence in the manifest.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ax-publish-goods - After installation, invoke the skill by name or use
/ax-publish-goods - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- 移除了示例中硬编码的 app_key 和 secret 值,改为 "???" 占位符,提升安全性。
- 其余内容保持不变,未检测到功能或文档结构调整。
v1.0.1
- Removed the file REFERENCE.md from the project.
- Updated documentation in SKILL.md to provide comprehensive Python usage examples and API parameter explanations.
- Improved clarity on how to batch publish goods using the Aoxiang (Taobao Flash Sale) API.
- Expanded API details, signature algorithm description, and response format information.
- Listed related scripts and clarified usage for both Python and command line.
v1.0.0
Initial release of 翱象发品 Skill.
- Requires Java JDK 8 environment.
- Usage involves building openclaw_demo.jar from the provided Java code.
- Supports batch creation of goods (sku) via the command line.
- Includes clear request parameter specification and usage example.
Metadata
Frequently Asked Questions
What is 翱象发品?
Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format. It is an AI Agent Skill for Claude Code / OpenClaw, with 306 downloads so far.
How do I install 翱象发品?
Run "/install ax-publish-goods" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 翱象发品 free?
Yes, 翱象发品 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 翱象发品 support?
翱象发品 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 翱象发品?
It is built and maintained by BigMountains (@bigmountains); the current version is v1.0.2.
More Skills