服务分发购物SKILL

用户在场/不在场购买skill

This skill reads and writes local session files and documents a workflow that would require payment tokens, cron scheduling, and cloud APIs — yet the shipped JS is a local mock that does not perform networked payments or scheduling. Before installing or supplying any real payment credentials: (1) treat this as a demo/placebo implementation until the author provides real API integrations; (2) do not store real payment tokens in seap.config.json in plaintext; (3) review/modify the scripts to implement secure API calls, encrypted credential storage, and proper cron integration or run it in an isolated/test environment; (4) if you expect automatic scheduled purchases, require the author to demonstrate secure handling of tokens, network endpoints, and error handling. If you cannot verify those, avoid providing real secrets or using the skill for real purchases.

Type: OpenClaw Skill Name: seap-shopping Version: 1.0.0 The skill exhibits a shell injection vulnerability in SKILL.md, where user-provided input (queryGoodsIntention) is passed directly into a shell command (node scripts seap-cli search ... --intent=${queryGoodsIntention}) without sanitization. While the accompanying scripts/seap-cli.js contains only benign mock logic for searching and purchasing goods, the instruction pattern in SKILL.md creates a high-risk surface for remote code execution (RCE) if the OpenClaw agent executes the command as written. No evidence of intentional malice, data exfiltration, or persistence was found.