← 返回 Skills 市场

Amazon After Sales Flow Luoqianchenguni Max

Name: Amazon After Sales Flow Luoqianchenguni Max
Author: luoqianchenguni-max

作者 luoqianchenguni-max · GitHub ↗ · v0.1.1 · MIT-0

cross-platform ⚠ suspicious

257

总下载

当前安装

版本数

在 OpenClaw 中安装

/install amazon-after-sales-flow-luoqianchenguni-max

功能描述

Automates Amazon after-sales by opening orders, accessing details, running contact flow, and drafting or sending seller messages with explicit confirmation.

使用说明 (SKILL.md)

Amazon After-Sales Flow

Playwright-based Amazon after-sales automation with explicit send confirmation.

Runtime Requirements

This skill requires a JS runtime and Playwright binaries.

Required environment:

Node.js >= 18
npm dependencies installed
Playwright Chromium installed

Expected setup before use:

npm install
npx playwright install chromium

Full-Flow Behavior

Open Amazon orders page (year from input when provided).
Find an order and open order details.
Run contact flow chain.
Type message and only send if explicitly confirmed.

Input Modes

Natural language:

run amazon-after-sales-flow 2025
execute amazon-after-sales-flow 2025

JSON actions:

{"action":"run_full_flow", ...}
{"action":"open_orders", ...}
{"action":"run_contact_flow", ...}
{"skill":"amazon_contact_flow","args":{...}}

Safety And Data Handling

Legacy shell URL opener is removed.
URL-only free text input is blocked.
Sending requires both auto_send=true and confirm_send=true.
The runtime can read page DOM on Amazon order/messaging pages to complete the workflow.
Local artifacts may be stored in workspace files.
No external upload endpoint is configured by default in this package.

Output

Returns runtime JSON traces/results for executed actions.\r

安全使用建议

This package appears to implement the described Amazon after‑sales automation and uses Playwright (so you'll need to run npm install and install Chromium). However: (1) the registry/metadata claims 'instruction-only' while the bundle contains runnable JS (including a large _easybuy_browser_runtime.js) — that inconsistency is concerning and worth asking the author to explain; (2) the runtime will read Amazon order and messaging DOM (sensitive data) and can save local artifacts — inspect the code for any network/upload calls before running; (3) run the package in an isolated/test environment (not your primary profile) and verify the send gating (auto_send + confirm_send) manually; and (4) if you lack the ability to audit the runtime JS, avoid running it against an account with real personal data or funds until you can review the code or get assurances from the author.

功能分析

Type: OpenClaw Skill Name: amazon-after-sales-flow-luoqianchenguni-max Version: 0.1.1 The skill bundle provides a Playwright-based automation framework for managing Amazon after-sales processes, such as checking order details and drafting seller messages. It includes several proactive security measures, such as strict domain whitelisting for 'amazon.*' URLs in '_easybuy_browser_runtime.js', a double-confirmation requirement ('auto_send' and 'confirm_send') before messages are transmitted, and logic in 'hello/skill.js' to block direct URL inputs. No evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection was found.

能力评估

ℹ Purpose & Capability

The declared purpose (automating Amazon after‑sales: open orders, fetch details, run contact flows, draft/send messages) is consistent with the shipped skill descriptors (many small browser/dom-focused skills) and the package.json dependency on Playwright. However the metadata said 'instruction-only' while README and shipped files indicate this package is NOT instruction-only and contains runnable JS (and duplicated .py stubs). That mismatch between registry metadata and the actual artifact set is unexpected and should be explained by the author.

ℹ Instruction Scope

SKILL.md and the dist skill JSONs explicitly instruct reading Amazon page DOMs, opening orders, drafting messages, and optionally sending them with explicit confirmations. This scope is appropriate for the described automation, but it necessarily accesses sensitive personal data in the active browser session (orders, messages, order IDs, prices). The skill also saves local artifacts (screenshots/DOM) to the workspace. The SKILL.md claims 'No external upload endpoint is configured by default', but you should verify the runtime code (_easybuy_browser_runtime.js) for any network/upload calls before running.

ℹ Install Mechanism

There is no platform install spec, but the package expects you to run 'npm install' and 'npx playwright install chromium' (package.json depends on playwright; package-lock points to npm registry). This is a standard but heavyweight install (Playwright + browser binaries). Because the project ships a ~64KB runtime JS file, the package is not truly instruction-only — that larger artifact should be reviewed prior to installation/execution. No unusual or remote download URLs were observed in the provided manifests.

✓ Credentials

The skill requests no environment variables, credentials, or config paths — appropriate because it operates within an active Playwright browser session and relies on the user's existing Amazon login. There are no declared unrelated credentials. Note that DOM access necessarily exposes personal order/messaging data from the user's browser.

✓ Persistence & Privilege

always:false (not force‑installed) and autonomous invocation is allowed (default). The skill may write artifacts to its workspace, which is expected for evidence/screenshot export. It does not request elevated platform privileges nor claim to modify other skills or system-wide agent settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install amazon-after-sales-flow-luoqianchenguni-max
安装完成后，直接呼叫该 Skill 的名称或使用 /amazon-after-sales-flow-luoqianchenguni-max 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.1

Clarify runtime/install requirements, data scope, and remove SW/IndexedDB wording inconsistencies

v0.1.0

Initial release for Amazon end-to-end after-sales flow with explicit send confirmation

元数据

Slug amazon-after-sales-flow-luoqianchenguni-max

版本 0.1.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 2

常见问题