客户清单分析

客户清单分析工具。基于Shop API客户清单数据，快速查询不同类型客户的数量、试用情况汇总、导购匹配情况。 核心能力： 1. 客户类型分布统计（普通/潜在/意向/成交客户数量及占比） 2. 客户试用情况汇总（感兴趣商品数、试用商品数、试用后成交转化） 3. 导购匹配分析（各导购关联客户数、匹配失败数量及原因）...

This skill largely does what its description says, but it imports a Shop API client from a local path (sys.path.insert('/Users/yangguangwei/.openclaw/workspace-front-door')). Before installing or running it: 1) Inspect the api_client implementation in that local workspace to confirm how it authenticates and whether it will read any local secrets or config files. 2) Note the code uses an absolute user-specific path that may not exist or may point to another user's files—this is brittle and could cause unexpected imports. 3) Run the skill in an isolated/test environment (or replace the import with a controlled client) if you cannot verify the api_client. 4) If you expect this skill to be portable, request the author remove hard-coded user paths and document how API credentials are provided. Because the skill can execute code from your filesystem that isn't included in the package, proceed with caution.

Type: OpenClaw Skill Name: retail-customer-list-analysis Version: 1.0.0 The skill is designed for retail customer data analysis but contains a hardcoded absolute path to a specific user's home directory (/Users/yangguangwei/.openclaw/workspace-front-door) in analyze.py for importing the api_client dependency. This is a security vulnerability (local path dependency) that could be exploited for local module hijacking in shared environments. While the logic aligns with the stated purpose and no evidence of intentional malice or data exfiltration was found, the use of hardcoded user-specific paths is a high-risk practice.