← Back to Skills Marketplace
Popmart Stock Monitor
by
IIustrator
· GitHub ↗
· v1.0.0
· MIT-0
65
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install popmart-stock-monitor
Description
Monitor PopMart product restock status across multiple channels including WeChat Mini Programs, Taobao, JD.com, and Tmall. Use when user wants to track avail...
Usage Guidance
This package looks like a plausible PopMart monitor but is incomplete and inconsistent. Before installing or running it: 1) Inspect missing pieces — the code references jd and tmall handlers that are not included and uses BeautifulSoup in taobao._check_via_scraping but the import is missing in that file; fix or remove broken imports. 2) Do not drop your API secrets into files or system-wide locations until you confirm the code actually uses them; prefer providing credentials via a secure mechanism (environment variables or a secrets manager) and review how they are consumed. 3) Avoid blindly following OpenClaw docs that copy files into system paths or run hard-coded user paths — run the code in a virtualenv or isolated container first. 4) Be cautious about scraping: platforms may block requests, and obey terms of service; using proxies/VPNs increases operational risk. 5) If you plan to use notifications, verify webhook targets (Feishu) and test with dummy webhooks. 6) If you are not comfortable auditing Python code, treat this skill as untrusted until a maintainer provides the missing handlers and demonstrates proper credential wiring and error handling.
Capability Analysis
Type: OpenClaw Skill
Name: popmart-stock-monitor
Version: 1.0.0
The skill is a stock monitoring tool for Chinese e-commerce platforms that requires high-risk capabilities including network access, web scraping (via selenium/playwright), and the handling of sensitive API credentials for Taobao and JD.com. While the code in scripts/monitor_popmart.py and the platform handlers appears aligned with the stated purpose, the documentation (OPENCLAW_INTEGRATION.md) encourages the use of automated shell execution via OpenClaw's /exec and cron systems. Per the analysis criteria, these risky capabilities—even if plausibly needed for the task—warrant a suspicious classification in the absence of clear malicious intent.
Capability Tags
Capability Assessment
Purpose & Capability
The skill claims to monitor Taobao, JD, Tmall, and WeChat and to use official APIs when available. It reasonably requests Taobao/JD API keys and Feishu webhook in docs, which fit the purpose. However, metadata declares no required env vars/credentials, and the Python code constructs platform handler instances without passing API keys from the provided config, so credentials would not actually be used. Also monitor_popmart imports jd and tmall handlers but those modules are not present in the package — inconsistent with the declared multi-platform capability.
Instruction Scope
SKILL.md instructs installing networked scraping tools, using proxies/VPNs, creating cron jobs, and copying the skill into system paths (e.g., into OpenClaw's skills directory). OPENCLAW_INTEGRATION.md contains hard-coded example paths (/Users/panda/...) and suggests commands that would execute files from a user's home; the docs also show running /exec on local files. Nothing in the instructions asks to read unrelated secrets, but the guidance to copy code into system directories and to create persistent cron jobs expands the runtime scope beyond an ephemeral script and should be treated cautiously.
Install Mechanism
There is no registry install spec; SKILL.md recommends pip installing requests, beautifulsoup4, selenium, and playwright (and references running `playwright install chromium`). This is a standard Python stack for scraping/browser automation and is not an unusual install pattern. There are no downloads from untrusted URLs in the package. However, playwright implies installing a browser binary which increases footprint; the package provides no packaged installer or requirements file — installation is manual and must be trusted by the user.
Credentials
The documentation and example configs request Taobao/Tmall and JD API keys and a Feishu webhook (appropriate for notifications). But registry metadata lists no required env vars/primary credential. The runtime code uses a config file (popmart_config.json) to hold API keys/webhook, but the monitor instantiates platform handlers without passing those keys, so the declared credentials are not actually wired. The mismatch between declared metadata and required secrets is suspicious and could lead users to put secrets in files unnecessarily. The docs also reference debug via DEBUG=true (an env var) that is not declared.
Persistence & Privilege
The skill itself does not request special platform privileges (always:false) and is user-invocable. The docs recommend setting up cron jobs or copying the skill into OpenClaw's skills directory for persistent monitoring; those are user actions but would create persistent execution. That persistence is user-driven rather than automatic from the skill metadata, but copying into system locations (example shows ~/.npm-global and hard-coded paths) is a potentially risky operational instruction and should be considered carefully.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install popmart-stock-monitor - After installation, invoke the skill by name or use
/popmart-stock-monitor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of PopMart Stock Monitor.
- Monitor PopMart product availability across WeChat Mini Program, Taobao, JD.com, and Tmall.
- Configurable product watch list, check intervals, and platform priorities via `popmart_config.json`.
- Notifies via Feishu, email, SMS, or desktop when items are restocked.
- Supports official APIs (when available) and web scraping with rate limit and anti-bot considerations.
- Flexible stock detection with false positive filtering and troubleshooting guidance.
Metadata
Frequently Asked Questions
What is Popmart Stock Monitor?
Monitor PopMart product restock status across multiple channels including WeChat Mini Programs, Taobao, JD.com, and Tmall. Use when user wants to track avail... It is an AI Agent Skill for Claude Code / OpenClaw, with 65 downloads so far.
How do I install Popmart Stock Monitor?
Run "/install popmart-stock-monitor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Popmart Stock Monitor free?
Yes, Popmart Stock Monitor is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Popmart Stock Monitor support?
Popmart Stock Monitor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Popmart Stock Monitor?
It is built and maintained by IIustrator (@iiustrator); the current version is v1.0.0.
More Skills