Price Hunter

Global price comparison tool with international platform support. Compare prices across Amazon, eBay, AliExpress, Temu (international) AND JD, Taobao, Tmall,...

This skill is internally consistent, but be aware of practical and policy considerations before installing: it scrapes public product pages and search results — this can trigger anti-scraping blocks, return incomplete data for pages behind login, or run afoul of some sites' terms of service. The skill does not request credentials, but it will make many outgoing requests (the agent's network/IP will be used). If you need reliable or high-volume data, prefer official APIs from merchants or aggregator partners and consider rate limits, localization (currency, region, language), and verifying final prices before purchasing. If you want to restrict network access or audit requests, do that at the agent/platform level. If anything in the SKILL.md seems unclear (for example how it handles paginated results, currency rounding, or shipping estimate sources), ask the author for clarification before use.

Type: OpenClaw Skill Name: price-hunter Version: 1.0.0 The skill instructs the AI agent to process user-provided URLs and construct `web_search` queries using unsanitized user input. This creates a significant prompt injection surface and a potential Server-Side Request Forgery (SSRF) vulnerability if the `web_fetch` tool (implicitly used for user-provided URLs) is not properly sandboxed. While the stated purpose is benign price comparison, these instructions in `SKILL.md` enable risky capabilities that could be exploited by a malicious user to direct the agent to arbitrary external sites or manipulate search queries for unintended actions.