← Back to Skills Marketplace
E-commerce Data Analyzer
by
baolige2023
· GitHub ↗
· v2.7.0
· MIT-0
193
Downloads
0
Stars
0
Active Installs
16
Versions
Install in OpenClaw
/install ecommerce-data-analyzer
Description
电商数据分析工具，支持CSV销售数据上传、生成销售趋势图/产品排名/渠道收入占比/利润率分析/库存预警，一键生成PDF报告，集成SkillPay支付接口。适用于电商卖家分析销售业绩、生成业务报告。
README (SKILL.md)
电商数据分析工具
功能概述
- 上传CSV格式的销售数据文件
- 自动生成以下分析图表和报表：
- 日销/周销/月销趋势折线图
- 各产品销售数量/金额排名
- 各销售渠道（Amazon/Shopify/独立站）收入占比饼图
- 利润率分析（需手动填入成本数据）
- 库存预警：基于销售速度预测断货时间
- 一键导出完整分析报告为PDF文件
- 全中文界面支持
支付说明
每次调用本工具将收取0.001 USDT，支付接口由SkillPay.me提供，API Key：sk_d11f398e77b6e892eb7a7d421fe912dde27322cf1792366b776b72bd459d3c2e
使用流程
- 上传销售数据CSV文件，CSV需包含以下字段：
- 订单日期
- 产品名称
- 销售数量
- 销售金额
- 销售渠道
- 库存数量
- 填写成本数据（用于利润率分析）
- 系统自动生成分析图表和报告
- 下载PDF报告
依赖要求
- Python 3.8+
- pandas: 数据处理
- matplotlib: 图表生成
- reportlab: PDF生成
- flask: 网页界面（可选）
部署说明
- 克隆或下载本技能目录
- 安装依赖：
pip install pandas matplotlib reportlab flask - 运行启动脚本：
python scripts/app.py - 访问本地地址即可使用工具
Usage Guidance
该技能实现与说明一致，但存在明确风险：SkillPay API Key 被明文嵌入在 SKILL.md 和源码中。风险与后果：任何拿到这代码的人或仓库副本的人都能看到该密钥，可能被用于调用 SkillPay API（例如创建支付链接、查询/操作计费），具体影响取决于 SkillPay 的权限模型。在安装/运行前考虑： 1) 不要在公网/生产服务器上直接运行带有硬编码密钥的服务；只在本地受控环境或隔离容器中测试。 2) 要求作者或维护者将 API Key 移出代码，改为通过环境变量传入；如果你必须使用，替换为你自己的 SkillPay key 并在 SkillPay 控制台检查/限制该 key 的权限与来源。 3) 将 app.config['SECRET_KEY'] 替换为随机安全值或来自环境变量以保护会话。 4) 在首次运行时把 TEST_MODE 开启以避免真实计费并观察网络流量（确保没有将上传的数据发送到不相关的第三方）。 5) 验证 skillpay.me 域名和该服务的可信度——如果你无法确认 SkillPay 的合法性或密钥权限，避免使用。 6) 若已经在公开位置暴露该密钥，请联系 SkillPay 并尽快轮换/撤销该密钥。
Capability Analysis
Type: OpenClaw Skill
Name: ecommerce-data-analyzer
Version: 2.7.0
The skill contains a significant path traversal vulnerability in the '/analysis/<filename>' and '/generate_pdf/<filename>' routes within 'scripts/app.py', where user-supplied filenames are joined to paths without sanitization. This could allow an attacker to read arbitrary files on the system that the process has permissions for. Additionally, the code includes a hardcoded API key for the 'SkillPay.me' service and lacks validation for CSV content, which are high-risk security flaws, though they appear to be unintentional vulnerabilities rather than intentional malice.
Capability Assessment
Purpose & Capability
技能描述为电商数据分析并声明集成 SkillPay；代码确实实现了 CSV 上传、分析、PDF 导出和对 skillpay.me 的计费调用，功能上与描述一致。但 SKILL.md 与代码都将 SkillPay API Key 明文嵌入，这是实现细节可解释但不符合凭据管理最佳实践。
Instruction Scope
SKILL.md 的运行/部署说明与代码行为一致（pip 依赖、运行 scripts/app.py）。说明中公开了 API Key，并指示如何启用/禁用测试模式；指令未要求读取系统上无关文件或凭据，但包含网络调用（skillpay.me）用于计费，这会在运行时向外部服务发出请求。
Install Mechanism
没有自动安装脚本或来自不受信任 URL 的下载说明；这是一个源码/运行型应用，用户按说明安装 Python 依赖并本地运行，安装机制本身风险较低。
Credentials
requires.env 列表为空，但代码与 SKILL.md 中包含并使用了硬编码的 SkillPay API Key (sk_d11f39...). 这既不透明也不成比例：处理 CSV/分析并不需要公开共享或嵌入第三方计费密钥到代码库。应将该密钥改为运行时从安全环境变量读取，并在元数据中声明。
Persistence & Privilege
技能没有设置 always:true，也不修改系统范围配置。运行时会在技能目录下创建 uploads/reports/static/charts 等文件夹并写入生成文件，这仅限于技能目录范围，权限要求适中。不过 app.config['SECRET_KEY'] 使用静态值（'your-secret-key'）会使会话 cookie 可预测，应使用安全随机值或环境变量。
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ecommerce-data-analyzer - After installation, invoke the skill by name or use
/ecommerce-data-analyzer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.7.0
- Added support for uploading and processing new CSV sales data files.
- Updated main application script to handle additional uploaded data files.
v2.6.1
- Added support for uploading new CSV sales data files.
- Updated core script (scripts/app.py) to improve handling of uploaded data.
- No changes to documentation or user-facing features.
v2.6.0
- 新增上传和分析CSV销售数据的示例文件。
- 更新 app.py，提升数据处理或文件上传相关功能（具体细节未公开）。
- 其余功能说明与用法保持不变。
v2.5.0
- Updated scripts/app.py.
- No user-facing or documentation changes in this release.
v2.4.1
- Added support for uploading and processing new CSV sales data files.
- Updated core application logic in scripts/app.py to handle additional data input.
v2.4.0
- Added sample CSV sales data file for easier testing and demonstration.
- Updated core application script to support new data file integration.
v2.3.0
Version 2.3.0
- Updated scripts/app.py with the latest changes.
- No user-facing changes to documentation or feature set.
v2.2.1
- Added sample CSV sales data file for testing or demonstration purposes.
- Made updates to scripts/app.py (details not specified).
- No changes to SKILL.md content.
v2.2.0
- Added support for uploading sample CSV sales data file.
- Updated core script (scripts/app.py) to handle new input.
- No changes to user documentation or main workflow.
v2.1.0
- Added a dedicated payment_required.html template to improve the user experience when payment is required.
- Updated scripts/app.py to support and render the new payment-required page.
v2.0.1
- Maintenance release with internal updates.
- Modified scripts/app.py; no user-facing features changed.
- All core functionalities and usage remain the same.
v2.0.0
Version 2.0.0 introduces test coverage for the core application logic.
- Added test_skillpay.py to provide tests for SkillPay payment integration and key workflows.
- Updated scripts/app.py with necessary changes to support testing and maintainability.
v1.3.0
- Improved internal code structure in scripts/app.py for better maintainability.
- Updated and expanded test cases in test_payment.py to increase coverage and reliability.
- No changes to user interface or feature set.
v1.2.0
- Added automated payment test script (test_payment.py) to improve payment interface reliability.
- Updated main application logic and web template (scripts/app.py, templates/index.html) for enhanced functionality and stability.
v1.1.0
- Added test_sales_data.csv for easier testing and demonstration of analysis features.
- Updated analysis and index HTML templates to improve data display and user experience.
- Enhanced scripts/app.py for better CSV handling and integration with new test data.
v1.0.0
ecommerce-data-analyzer 1.0.0 – 初始版本发布
- 支持上传CSV格式电商销售数据，自动生成多维度分析图表和报表
- 提供销售趋势、产品排名、渠道收入占比、利润率分析和库存预警
- 一键导出完整分析报告为PDF文件
- 集成SkillPay支付接口，每次调用收取0.001 USDT
- 全中文界面，适合电商卖家业务分析
- 简单部署，依赖pandas、matplotlib、reportlab、flask
Metadata
Frequently Asked Questions
What is E-commerce Data Analyzer?
电商数据分析工具，支持CSV销售数据上传、生成销售趋势图/产品排名/渠道收入占比/利润率分析/库存预警，一键生成PDF报告，集成SkillPay支付接口。适用于电商卖家分析销售业绩、生成业务报告。 It is an AI Agent Skill for Claude Code / OpenClaw, with 193 downloads so far.
How do I install E-commerce Data Analyzer?
Run "/install ecommerce-data-analyzer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is E-commerce Data Analyzer free?
Yes, E-commerce Data Analyzer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does E-commerce Data Analyzer support?
E-commerce Data Analyzer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created E-commerce Data Analyzer?
It is built and maintained by baolige2023 (@baolige2023); the current version is v2.7.0.
More Skills