← 返回 Skills 市场

Haresh Cart Management

Name: Haresh Cart Management
Author: haresh-sai06

作者 Haresh Sainaath S · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

384

总下载

当前安装

版本数

在 OpenClaw 中安装

/install haresh-cart-management

功能描述

Manage shopping cart operations via n8n webhook integration

使用说明 (SKILL.md)

Cart Management Skill

Purpose

Handles all shopping cart operations including adding items, removing items, and updating quantities.

When to Use

User wants to add a product to their cart
User wants to remove an item from cart
User wants to change item quantity

Supported Actions

Add to Cart

Extract product_id from user message
Validate product_id format
Check quantity (default to 1)
Call n8n webhook at http://localhost:5678/webhook/cart-add
Confirm success to user

Remove from Cart

Extract product_id to remove
Check current quantity
If quantity greater than 1, ask user for confirmation
Call n8n webhook at http://localhost:5678/webhook/cart-remove
ALWAYS confirm with user before removing

Update Quantity

Extract product_id and new quantity
Validate quantity is positive integer
Call n8n webhook at http://localhost:5678/webhook/cart-update
Confirm update to user

Safety Rules

NEVER allow negative quantities
ALWAYS confirm before removing items
Validate product_id exists before operations\r

安全使用建议

This skill looks coherent with its purpose, but it leaves important details unspecified. Before installing: (1) Ensure you actually run n8n at http://localhost:5678 and that the three webhook endpoints exist and are authenticated — otherwise the agent will attempt local HTTP requests that could be abused. (2) Confirm how product_id validation and current-cart checks are implemented (does your n8n workflow perform these checks?), and avoid giving the agent blanket access to external/internal services you don't control. (3) Prefer protecting the webhooks with authentication or a secret token and document expected request/response formats. If you need stronger assurance, run the skill in a sandboxed agent or review/modify the SKILL.md to explicitly call authenticated endpoints and to define where validation and cart-state reads occur.

功能分析

Type: OpenClaw Skill Name: haresh-cart-management Version: 1.0.1 The skill instructs the AI agent to make HTTP requests to `http://localhost:5678` for cart management operations via n8n webhooks, as detailed in SKILL.md. This direct access to `localhost` poses a Server-Side Request Forgery (SSRF) risk, potentially allowing the agent to interact with other local services running on the host machine. While the stated purpose is benign, this capability introduces a significant vulnerability for unintended actions or information disclosure if local services are vulnerable or misconfigured.

能力评估

✓ Purpose & Capability

Name/description claim shopping-cart operations via n8n webhooks and the SKILL.md only references calling local n8n webhook endpoints (http://localhost:5678/webhook/...). No unrelated binaries, env vars, or install steps are requested, so required resources are proportionate to the stated purpose.

ℹ Instruction Scope

Runtime instructions are limited to extracting product_id/quantity and calling the three localhost webhook endpoints. However, they do not specify how to 'validate product_id exists' or how to 'check current quantity' (e.g., which API or data source to use), which is ambiguous and could lead the agent to probe other services for context. Otherwise the instructions do not direct reading files or exfiltrating data.

✓ Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded. This is the lowest-risk install profile.

✓ Credentials

No environment variables, credentials, or config paths are requested, which is proportionate for a webhook-based cart skill. The use of localhost endpoints means no external credentials are declared, but those endpoints may rely on local n8n auth which is not described.

✓ Persistence & Privilege

Skill is not always-enabled and does not request persistent privileges or modifications to other skills. Default autonomous invocation is allowed (platform default) but not combined with other concerning flags.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install haresh-cart-management
安装完成后，直接呼叫该 Skill 的名称或使用 /haresh-cart-management 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

- Added _meta.json file to the project. - No other changes to cart management functionality.

v1.0.0

haresh-cart-management 1.0.0 - Initial release of shopping cart management skill. - Supports adding, removing, and updating item quantities in the cart. - Integrates with n8n webhooks for cart actions. - Includes strict safety and validation rules for product IDs and quantities.

元数据

Slug haresh-cart-management

版本 1.0.1

许可证 —

累计安装 1

当前安装数 1

历史版本数 2

常见问题