Search for products on Naver Shopping. Use when the user wants to find product prices, links, or compare items in the Korean market.

This skill's code is small and calls the official Naver Shopping API, which is expected. However: 1) SKILL.md and the script require NAVER_Client_ID and NAVER_Client_Secret but the registry metadata does not declare these — confirm before supplying credentials. 2) SKILL.md uses a hard-coded user path (/Users/dryoo/...), which you should replace with the actual path to the skill or run the script from its directory. 3) Review the script locally to ensure it matches the provided source and that you are comfortable providing only Naver API credentials (do not reuse high-privilege or broad credentials). 4) Prefer running the script in an isolated environment (e.g., dedicated account or container) the first time. If you need higher assurance, ask the publisher to correct the registry metadata to list the required env vars and provide a relative or generic run command.

Type: OpenClaw Skill Name: naver-shopping Version: 1.0.0 The skill is a straightforward wrapper for the Naver Shopping API. It securely retrieves API credentials (NAVER_Client_ID, NAVER_Client_Secret) from environment variables as specified in SKILL.md, and uses them to make requests to the legitimate Naver API endpoint (openapi.naver.com) via scripts/search_shopping.py. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The code is clear, uses standard libraries, and aligns perfectly with its stated purpose.