← Back to Skills Marketplace
521
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install taobao-automation
Description
实现淘宝店铺运营选品分析、标题优化、数据监控、竞品监控及营销文案自动生成与推送。
Usage Guidance
This skill's description and runtime instructions expect integrations (Feishu/WeChat pushes), scheduled background jobs, TTS, and web scraping, but the package declares no credentials, no install steps, and no config paths. Before installing or enabling it, ask the author to: (1) list exactly which credentials it needs (Feishu app ID/secret, WeChat tokens, TTS API keys, Taobao credentials or cookie management) and how they will be provided/stored; (2) explain how cron/scheduling is implemented and authorized; (3) provide concrete endpoints and rate-limit/backoff behavior for scraping and a statement on compliance with Taobao's terms; (4) supply an install spec or code for review so you can verify it won't exfiltrate ambient credentials. If the author cannot supply credentials and an install plan, consider the skill unsafe to enable for autonomous runs — at minimum restrict it to user-invoked mode and require explicit, per-run consent and manual credential input.
Capability Analysis
Type: OpenClaw Skill
Name: taobao-automation
Version: 1.0.0
The skill bundle provides legitimate automation for Taobao shop management, including product analysis, competitor monitoring, and data reporting via Feishu. It utilizes standard OpenClaw capabilities such as web searching, fetching, and cron jobs for scheduled tasks, all of which are consistent with its stated purpose in SKILL.md. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
The skill claims integration with Feishu/WeChat (for messages and calendar), Cron scheduling, TTS, Canvas image generation, and web scraping of Taobao/competitors — but the registry metadata requests no environment variables, no credentials, and provides no install mechanism. Integrations like Feishu and push notifications normally require API keys/app credentials; scraping Taobao at scale typically needs authenticated cookies, proxies, or rate-limit handling. The requested manifest is missing expected capabilities and artifacts for the stated purpose.
Instruction Scope
SKILL.md instructs the agent to perform web_search/web_fetch, run periodic cron-like tasks, push data to Feishu/WeChat, perform TTS and generate canvases. It gives no guidance on where to store or how to obtain API credentials, how to set up cron/background jobs, nor does it limit what pages or data may be collected. The instructions therefore overreach: they direct data collection and external transmission but do not specify required auth, endpoints, or safeguards.
Install Mechanism
This is instruction-only (no install spec, no code files), which minimizes on-disk risk but is also insufficient for implementing cron jobs, TTS engines, or canvas libraries. Without an install step, it's unclear how the skill expects scheduled tasks or TTS/Canvas to be provisioned on the host; this is an implementation gap rather than direct malware evidence.
Credentials
The skill declares zero required env vars / credentials despite referencing services that require secrets (Feishu/WeChat API tokens, TTS service keys, possibly Taobao session cookies or API credentials). That mismatch is disproportionate and suggests either the manifest is incomplete or the skill would attempt to use ambient credentials unexpectedly.
Persistence & Privilege
always is false and there is no request to modify other skills or system-wide settings. However, the skill expects scheduled/automated behavior (cron jobs and periodic scraping); since no installation mechanism is declared, it's unclear how scheduling is intended to be established or authorized. Autonomous invocation is allowed by default (not flagged alone) but combined with the missing credential/setup details increases risk.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install taobao-automation - After installation, invoke the skill by name or use
/taobao-automation - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
taobao-automation v1.0.0
- 首发上线，实现淘宝店铺运营全流程自动化
- 支持选品分析、竞品监控、标题优化、营销文案生成与运营报告推送
- 提供定时数据监控与飞书/微信智能提醒
- 内置多场景自动化和常用运营命令
- 集成Web抓取、Feishu API、TTS语音等多项技术能力
Metadata
Frequently Asked Questions
What is Taobao Automation?
实现淘宝店铺运营选品分析、标题优化、数据监控、竞品监控及营销文案自动生成与推送。 It is an AI Agent Skill for Claude Code / OpenClaw, with 521 downloads so far.
How do I install Taobao Automation?
Run "/install taobao-automation" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Taobao Automation free?
Yes, Taobao Automation is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Taobao Automation support?
Taobao Automation is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Taobao Automation?
It is built and maintained by guowaa223 (@guowaa223); the current version is v1.0.0.
More Skills