← Back to Skills Marketplace
xianyu-api-client-skill
by
crab-xieyujin
· GitHub ↗
· v1.0.2
· MIT-0
167
Downloads
1
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install xianyu-api-client-skill
Description
Secure and reliable API client for Xianyu Guanjia Open Platform with authentication, signing, and error handling.
Usage Guidance
This skill appears to be a straightforward Python client for the Xianyu Guanjia API and only needs your app key and secret. Before installing: (1) Verify you trust the vendor/endpoint (https://goofish.pro / open.goofish.pro) because the client sends network requests there; (2) keep credentials in environment variables or a secrets manager and rotate them regularly; (3) review the bundled __init__.py (it is short and only performs signed POSTs) and test with a limited-permission/test account first; (4) note the small version mismatch between registry (1.0.2) and SKILL.md (1.0.3)—not necessarily malicious but worth confirming with the publisher. If you do not want the agent to call this autonomously, disable autonomous invocation in your agent settings.
Capability Analysis
Type: OpenClaw Skill
Name: xianyu-api-client-skill
Version: 1.0.2
The skill bundle is a legitimate API client for the Xianyu Guanjia (Goofish) Open Platform. The Python implementation in `__init__.py` correctly handles MD5-based request signing and HTTPS communication with the official domain `open.goofish.pro`. The `SKILL.md` file provides helpful instructions for the AI agent, including safety guidelines that encourage requesting user confirmation before performing sensitive or high-cost operations.
Capability Assessment
Purpose & Capability
Name, description, SKILL.md, and code all describe a Python API client for Xianyu (闲鱼管家). The required environment variables (XIAN_YU_APP_KEY, XIAN_YU_APP_SECRET) and the python binary are appropriate and expected for this purpose. The client talks to open.goofish.pro/api host, which matches the declared homepage (goofish.pro).
Instruction Scope
SKILL.md contains usage instructions limited to configuring keys (env or code), calling client methods, and confirmation flows for sensitive operations. The instructions do not ask the agent to read unrelated files, harvest other credentials, or exfiltrate data. Minor note: SKILL.md version (1.0.3) differs from registry version (1.0.2), which is likely benign but worth noting.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. A Python source file is bundled; it uses standard library modules and makes HTTPS calls to open.goofish.pro. No external downloads, obscure URLs, or archive extraction are present.
Credentials
The skill only requires two environment variables: XIAN_YU_APP_KEY and XIAN_YU_APP_SECRET. Those are exactly the credentials needed to authenticate to the described API. No unrelated secrets or broad system credentials are requested.
Persistence & Privilege
The skill does not request permanent/always-on inclusion (always:false). It does not modify other skills or system-wide settings. Model invocation is enabled (platform default), which is normal for a user-invocable skill.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xianyu-api-client-skill - After installation, invoke the skill by name or use
/xianyu-api-client-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Major documentation overhaul: migrated SKILL.md to structured markdown with detailed setup, usage, and troubleshooting guidance in Chinese.
- Clarified configuration requirements, direct code examples, and API prerequisites.
- Added explicit environment variable guidance and sample parameter notes for product creation.
- Enhanced descriptions of supported features, interaction flow, and safe practices.
- Increased emphasis on security, permission management, and error recovery strategies.
- Updated metadata for version 1.0.3 and improved compatibility notes.
v1.0.1
No significant code or configuration changes detected; documentation updated and improved.
- SKILL.md fully rewritten for clarity, structure, and comprehensive guidance.
- Enhanced documentation on authentication, API communication, and error handling.
- Added clear configuration, feature list, technical specifications, and security best practices.
- Included example code for initialization and product creation.
- Outlined integration notes and support steps.
- No functional or file-level changes in this release.
v1.0.0
Initial release of xianyu-api-client-skill:
- Provides a basic client for Xianyu Manager Open Platform API
- Supports configurable authentication key management
- Automatic MD5-based API signature generation
- Unified request/response handling and error management
- Secure key management with support for environment variable or config file loading
- Includes error retry mechanism and logging
- Designed as a foundation for other Xianyu-related skills
Metadata
Frequently Asked Questions
What is xianyu-api-client-skill?
Secure and reliable API client for Xianyu Guanjia Open Platform with authentication, signing, and error handling. It is an AI Agent Skill for Claude Code / OpenClaw, with 167 downloads so far.
How do I install xianyu-api-client-skill?
Run "/install xianyu-api-client-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is xianyu-api-client-skill free?
Yes, xianyu-api-client-skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does xianyu-api-client-skill support?
xianyu-api-client-skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created xianyu-api-client-skill?
It is built and maintained by crab-xieyujin (@crab-xieyujin); the current version is v1.0.2.
More Skills