← Back to Skills Marketplace
sorftime
by
zhangfaguo
· GitHub ↗
· v0.1.9
· MIT-0
174
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install sorftime
Description
通过 sorftime-cli 调用 Sorftime 跨境电商全量数据接口（Amazon 43 + Shopee 5 + Walmart 13 = 61 个 endpoint）。 当用户或智能体需要：写脚本批量查询 ASIN/类目/关键词/Best Seller/跟卖/子体销量/产品评论， 自定义编排多个接口完...
Usage Guidance
Before installing or using this skill: (1) verify the npm package and GitHub repo (maintainer identity, package contents, recent commits) to ensure the CLI is legitimate; npm packages run code on install, so review code or install in an isolated environment. (2) Confirm where sorftime-cli stores API keys (local config path, file permissions) and consider using a least‑privilege API key or dedicated profile. (3) Be aware the CLI consumes paid credits/points for many monitoring endpoints—verify pricing and limits to avoid unexpected charges. (4) If you allow autonomous agent invocation, consider the agent's scope: it could call the CLI and make many queries (data exfiltration or costs). (5) If you need higher assurance, ask the publisher for the official homepage or signed release and inspect the package source before global installation.
Capability Analysis
Type: OpenClaw Skill
Name: sorftime
Version: 0.1.9
The skill bundle facilitates the installation and execution of an external CLI tool (`sorftime-cli`) via global npm installation and complex shell scripts. Files like `SKILL.md` and `amazon-recipes.md` instruct the agent to run potentially dangerous commands, including shell loops and piping to `jq`, which could be exploited via shell injection if user-provided parameters are not strictly sanitized by the agent. While the behavior aligns with the stated purpose of e-commerce data analysis and lacks clear evidence of intentional malice, the high-risk execution patterns and reliance on external binaries present a significant security risk.
Capability Tags
Capability Assessment
Purpose & Capability
Name/description, SKILL.md and resource files all describe calling the sorftime-cli to access Amazon/Shopee/Walmart endpoints. Required items (none declared) and the instructions (install npm package and add an API key) match the stated purpose—no unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md only instructs the agent to install/use the sorftime CLI and provides detailed CLI commands and endpoint docs. It does not direct reading unrelated files, exporting arbitrary environment variables, or posting data to unexpected endpoints. The doc does instruct the agent/user to supply a Sorftime API key via the CLI profile mechanism, which is coherent with the service.
Install Mechanism
There is no automated install spec in the skill bundle (instruction-only). The instructions recommend npm install -g sorftime-cli (an npm package and a GitHub repo are referenced). Installing an npm package executes code from the package/maintainer — expected for a CLI but worth verifying the package's authenticity and contents before installing.
Credentials
The skill declares no required environment variables. It does require the user to provide a Sorftime API key to sorftime add <profile> <api-key>. This is expected and proportionate. One missing detail in the docs is where/how the CLI persists the API key (config path/format); users should confirm this before use.
Persistence & Privilege
Skill is not marked always:true and does not request persistent platform privileges. It is user-invocable and allows autonomous model invocation (platform default). There is no instruction to modify other skills' configs or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sorftime - After installation, invoke the skill by name or use
/sorftime - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.9
- 增加「安全说明」和开源仓库/npm 官方主页信息，明确 CLI 工具为开源可审计，并由官方认证账号发布
- 认证步骤新增官方获取 api-key 的指引链接
- 细化 CLI 工具安装说明，推荐全局安装
- 其余接口分流、目录结构、错误码与调用规范无变更
v0.1.8
- Major update: Resource directory restructured with more granular endpoint files and public reference separation.
- Added comprehensive resources directory with per-endpoint API descriptions for Amazon, Shopee, and Walmart.
- Expanded SKILL.md: detailed trigger keywords, CLI account management, resource file index, and improved interface documentation.
- Obsolete or integrated agent resource file removed.
- Now supports a total of 61 documented endpoints across all platforms.
- Common CLI templates, domain tables, and error codes refactored for easier cross-reference.
v0.1.7
- 移除了“安装 CLI”步骤说明，精简认证说明，仅保留账户添加与激活命令
- 文档其他内容未变，未涉及功能、接口或命令调整
v0.1.6
No file changes detected in this release.
- Skill description and documentation streamlined for clarity and concise CLI usage.
- Focus shifted to command-line tool instructions (`sorftime-cli`), including installation, authentication, and command examples.
- Clear mapping of functional modules to corresponding resource files with trigger keywords.
- Compact Amazon, Shopee, and Walmart domain/site quick reference tables added.
- Usage rules clarified: always use correct domain values, wrap JSON params in single quotes, class tree queries require nodeId from CategoryTree.
- Monitoring APIs consumption clarified (points, not requests); emphasis on timeout settings for large responses.
v0.1.5
sorftime 0.1.5 Changelog
- Added skill manifest section to SKILL.md (YAML frontmatter with skill name, description, trigger keywords, and enabled flag).
- No other file or documentation changes detected.
- No functional or API changes included in this version.
v0.1.4
- Added full English translations to all core sections for international usability.
- Improved structure and formatting: all module titles and descriptions are now bilingual (Chinese/English) and easier to navigate.
- Updated API summaries and example usage to clearly show paths, key functions, and main APIs for each e-commerce platform.
- Expanded quick start and general notes sections to include bilingual instructions and error code explanations.
- Clarified and corrected some paths and naming conventions in the skill directory structure.
v0.1.3
- Added detailed SKILL.md documentation covering Sorftime's multi-platform API, features, usage scenarios, and skill breakdown by platform and function module.
- Provided comprehensive instructions for setup, API usage, and error handling across Amazon, Shopee, and Walmart platforms.
- Listed core use cases, supported sites, API endpoint groupings, and typical responses and errors for easier onboarding.
- Included guidance on account configuration, rate limits, credits system, and monitoring features.
Metadata
Frequently Asked Questions
What is sorftime?
通过 sorftime-cli 调用 Sorftime 跨境电商全量数据接口（Amazon 43 + Shopee 5 + Walmart 13 = 61 个 endpoint）。 当用户或智能体需要：写脚本批量查询 ASIN/类目/关键词/Best Seller/跟卖/子体销量/产品评论， 自定义编排多个接口完... It is an AI Agent Skill for Claude Code / OpenClaw, with 174 downloads so far.
How do I install sorftime?
Run "/install sorftime" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is sorftime free?
Yes, sorftime is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does sorftime support?
sorftime is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created sorftime?
It is built and maintained by zhangfaguo (@zhangfaguo); the current version is v0.1.9.
More Skills