← Back to Skills Marketplace
81
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install xiwu-inventory
Description
家居物品库存管理，支持查询、添加、消耗、修改物品，库存预警和购买建议上下文输出
Usage Guidance
This skill is coherent for managing a local inventory via a CLI, but it may automatically install a global npm package ('xiwu-niangzi') if the xiwu binary is missing. Before installing: (1) verify the npm package name and publisher (inspect the package on the npm registry or install manually), (2) consider manually installing the CLI yourself so you control the install, (3) be aware the skill will access inventory data stored under ~/.xiwu/xiwu.db via the xiwu CLI, and (4) Cron triggers will run the xiwu queries automatically. If you are uncomfortable with automatic global installs or an unknown npm package, decline automatic install and install/inspect the CLI manually.
Capability Analysis
Type: OpenClaw Skill
Name: xiwu-inventory
Version: 1.1.0
The skill manages home inventory by wrapping the 'xiwu-niangzi' CLI tool via the 'shell' tool. It includes an auto-installation routine in SKILL.md that executes 'npm install -g', which is a high-risk behavior involving global system modification and remote code execution. Furthermore, the skill constructs shell commands using user-provided input (e.g., 'xiwu add "<name>"'), which presents a potential shell injection vulnerability if the agent fails to sanitize inputs. While these actions are aligned with the stated purpose, the high-privilege capabilities warrant a suspicious classification.
Capability Assessment
Purpose & Capability
The name/description describe local inventory management and all declared requirements (a local 'xiwu' CLI) and the SKILL.md operations (search, add, update, remove, list, stocktake) match that purpose. Requesting the xiwu binary is expected for this capability.
Instruction Scope
Instructions constrain the agent to call the local 'xiwu' CLI with --json and to follow explicit confirmation and prompting rules. The only out-of-scope behavior is the runtime global install step (using pnpm/npm) if the CLI is missing; that step downloads code from the npm registry and modifies the system via a global install, which is a side-effect worth surfacing to the user.
Install Mechanism
The skill has no registry install spec but instructs at runtime to install a global npm package 'xiwu-niangzi' via pnpm/npm if 'xiwu' is absent. Installing a globally published npm package involves network fetch and executing code from an external registry. The package owner/publishing origin is not provided in the skill, so the runtime install is a moderate risk and should be verified by the user before allowing automatic installation.
Credentials
The skill does not request environment variables or unrelated credentials. It relies on a local CLI that stores data in ~/.xiwu/xiwu.db—access to that database is mediated by the xiwu CLI, which is reasonable for an inventory manager.
Persistence & Privilege
The skill is not forced-always and does not request elevated platform privileges. It can be invoked autonomously (platform default) and supports Cron-triggered queries that run without interactive user input; users should be aware scheduled runs will execute local xiwu queries automatically. The notable privilege is the ability to perform a global npm install at first run (a system-modifying action).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xiwu-inventory - After installation, invoke the skill by name or use
/xiwu-inventory - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
新增 CLI 自动安装：xiwu 命令不存在时自动检测并安装
v1.0.0
初始发布：库存查询、增删改、过期预警、购买建议上下文
Metadata
Frequently Asked Questions
What is Xiwu Inventory?
家居物品库存管理，支持查询、添加、消耗、修改物品，库存预警和购买建议上下文输出. It is an AI Agent Skill for Claude Code / OpenClaw, with 81 downloads so far.
How do I install Xiwu Inventory?
Run "/install xiwu-inventory" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Xiwu Inventory free?
Yes, Xiwu Inventory is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Xiwu Inventory support?
Xiwu Inventory is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Xiwu Inventory?
It is built and maintained by johnqxu (@johnqxu); the current version is v1.1.0.
More Skills