Naver Shopping Plus

한국형 쇼핑 검색 스킬. 네이버 쇼핑 API + 쿠팡/11번가 웹 스크래핑으로 배송비 포함 최저가를 자동 비교합니다.

This skill's code matches its description (Naver API + Coupang/11st scraping). However: 1) the SKILL.md and script expect NAVER_Client_ID and NAVER_Client_Secret but the registry metadata does not declare them — confirm the skill requires only your Naver API keys and not other secrets before installing. 2) Review the script yourself (or run it in an isolated environment) to verify there is no hidden network exfiltration; the visible code only queries Naver/Coupang/11st and prints results. 3) Web scraping can trigger IP blocks and may violate site terms — use responsibly. 4) Because the source/homepage are unknown, prefer installing only in a sandbox or VM and verify behavior (especially network requests and any logging of credentials) before giving it access to real credentials. If you decide to proceed, ask the publisher to update registry metadata to explicitly list the NAVER_Client_ID and NAVER_Client_Secret so the requirement is transparent.

Type: OpenClaw Skill Name: naver-shopping-plus Version: 1.0.0 The OpenClaw skill 'naver-shopping-plus' is classified as benign. The `scripts/search.py` file performs its stated function of searching Naver Shopping API and scraping Coupang/11st for product information. It uses standard libraries (`requests`, `beautifulsoup4`, `lxml`), reads API keys from environment variables (`NAVER_Client_ID`, `NAVER_Client_Secret`) for their intended purpose, and constructs URLs with proper encoding to prevent injection. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the OpenClaw agent in `SKILL.md` or `README.md`. The code's behavior aligns entirely with its described functionality.