← 返回 Skills 市场
翱象发品
作者
BigMountains
· GitHub ↗
· v1.0.2
· MIT-0
306
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install ax-publish-goods
功能描述
Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format.
使用说明 (SKILL.md)
翱象发品接口
对接翱象(淘宝闪购)零售开放平台,实现商品批量创建功能。
快速开始
Python 版本
from scripts.aoxiang_publish import AoxiangPublishClient
# 创建客户端
client = AoxiangPublishClient(
app_key="???",
secret="???"
)
# 构建商品列表
sku_list = [
{
"sku_name": "可口可乐 330ml",
"inventory_unit": "瓶",
"sku_code": "COLA330001",
"barcodes": ["6901234567890"],
"specification": "330ml",
"sale_price": "350" # 单位:分
}
]
# 调用接口
result = client.create_goods(
merchant_code="ERP_ACCESS_TEST",
erp_store_code="ERP_NORMAL",
sku_list=sku_list
)
# 处理结果
if result["body"]["errno"] == 0:
print("发品成功!")
else:
print(f"失败: {result['body']['error']}")
命令行使用
# 使用默认示例数据
python3 scripts/aoxiang_publish.py
# 自定义参数
python3 scripts/aoxiang_publish.py "MERCHANT_CODE" "STORE_CODE" '[{"sku_name":"商品","inventory_unit":"个","sku_code":"SKU001","barcodes":["123"],"specification":"规格","sale_price":"100"}]'
API 参数说明
请求参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
| cmd | string | 是 | 固定值: saas.sku.create.goods.batch |
| source | string | 是 | AppKey |
| secret | string | 是 | 用于签名,不传参只用于签名计算 |
| ticket | string | 是 | 随机生成的UUID格式字符串 |
| timestamp | string | 是 | 10位时间戳 |
| version | string | 是 | 固定值: 3 |
| encrypt | string | 是 | 固定值: 空字符串 "" |
| body | string | 是 | JSON格式的业务参数 |
| sign | string | 是 | MD5签名(大写) |
Body 参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
| merchant_code | string | 是 | 商家编码 |
| erp_store_code | string | 是 | 门店编码 |
| sku_list | array | 是 | 商品列表 |
SKU 参数
| 参数 | 类型 | 必填 | 说明 |
|---|---|---|---|
| sku_name | string | 是 | 商品名称 |
| inventory_unit | string | 是 | 库存单位(个/瓶/盒等) |
| sku_code | string | 是 | 商品编码(唯一) |
| barcodes | array | 是 | 条码列表 |
| specification | string | 是 | 规格 |
| sale_price | string | 是 | 售价(单位:分) |
签名算法
-
构建签名参数(按 key 字母顺序排序):
- body, cmd, encrypt, secret, source, ticket, timestamp, version
-
拼接成字符串:
key1=value1&key2=value2&... -
MD5 加密,转大写32位
响应格式
{
"body": {
"errno": 0,
"data": null,
"error": "success"
},
"cmd": "resp.saas.sku.create.goods.batch",
"encrypt": "",
"sign": "...",
"source": "41389872",
"ticket": "...",
"timestamp": 1234567890,
"traceid": "...",
"version": "3"
}
errno: 0表示成功errno != 0表示失败,错误信息在error字段
注意事项
- 价格单位是"分",不是元(3.5元 = 350分)
- sku_code 必须唯一
- ticket 是随机生成的UUID格式(带减号)
- timestamp 是10位时间戳(秒级)
- body 需要转为JSON字符串参与签名
文件列表
scripts/aoxiang_publish.py- Python 客户端REFERENCE.md- Java 参考实现
安全使用建议
This package is inconsistent: its description promises a Java/JAR-based tool but the README shows Python examples and refers to local scripts that aren't included. Before installing or providing credentials, ask the publisher for the missing files (scripts/aoxiang_publish.py, REFERENCE.md, or the openclaw_demo.jar) and an explicit endpoint URL. Do not supply your app_key/secret until you can inspect the actual code that will execute them. If you must test it, run in an isolated environment (container or sandbox) and prefer ephemeral credentials you can revoke. If you can't get a coherent explanation or the source code, treat it as untrusted.
功能分析
Type: OpenClaw Skill
Name: ax-publish-goods
Version: 1.0.2
The skill bundle provides documentation and a Python interface for integrating with the Aoxiang (Taobao Flash Sale) retail platform API. The provided files (_meta.json and SKILL.md) describe standard e-commerce operations for batch product creation, including MD5 signing logic and parameter specifications, with no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The top-level description says the skill runs a Java JDK8 openclaw_demo.jar, yet SKILL.md contains only Python usage examples (scripts/aoxiang_publish.py) and references a Java REFERENCE.md — none of these code files exist in the package. This inconsistency between claimed implementation (Java/JAR) and provided instructions (Python, missing scripts) is unexpected and unexplained.
Instruction Scope
SKILL.md documents API parameters, the MD5 signing algorithm, example Python client usage, and CLI invocation. It does not instruct reading unrelated system files or env vars, nor does it include an endpoint URL. However, it references local files (scripts/aoxiang_publish.py, REFERENCE.md) that are not present in the package, making the runtime behavior unclear. The signing description is slightly ambiguous about whether 'secret' is transmitted or only used for signing.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk by the registry. This is low risk from an install-mechanism perspective. The missing referenced files are an availability/integrity issue but not an installation risk.
Credentials
The instructions clearly require an app_key and secret (used for signing) but the skill metadata lists no required environment variables or primary credential. The manifest not declaring these secrets is an omission that makes it unclear how credentials are expected to be provided and audited.
Persistence & Privilege
Default privileges apply (always: false, agent-invocable). The skill does not request persistent or elevated platform presence in the manifest.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install ax-publish-goods - 安装完成后,直接呼叫该 Skill 的名称或使用
/ax-publish-goods触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- 移除了示例中硬编码的 app_key 和 secret 值,改为 "???" 占位符,提升安全性。
- 其余内容保持不变,未检测到功能或文档结构调整。
v1.0.1
- Removed the file REFERENCE.md from the project.
- Updated documentation in SKILL.md to provide comprehensive Python usage examples and API parameter explanations.
- Improved clarity on how to batch publish goods using the Aoxiang (Taobao Flash Sale) API.
- Expanded API details, signature algorithm description, and response format information.
- Listed related scripts and clarified usage for both Python and command line.
v1.0.0
Initial release of 翱象发品 Skill.
- Requires Java JDK 8 environment.
- Usage involves building openclaw_demo.jar from the provided Java code.
- Supports batch creation of goods (sku) via the command line.
- Includes clear request parameter specification and usage example.
元数据
常见问题
翱象发品 是什么?
Manage batch creation of goods SKUs using Java JDK 8 by executing openclaw_demo.jar with specified merchant, store, and SKU details in JSON format. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 306 次。
如何安装 翱象发品?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install ax-publish-goods」即可一键安装,无需额外配置。
翱象发品 是免费的吗?
是的,翱象发品 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
翱象发品 支持哪些平台?
翱象发品 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 翱象发品?
由 BigMountains(@bigmountains)开发并维护,当前版本 v1.0.2。
推荐 Skills