← 返回 Skills 市场

Loss Items 查询（复购商品）

Name: Loss Items 查询（复购商品）
Author: kunxinian

作者 KUNXINIAN · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

158

总下载

当前安装

版本数

在 OpenClaw 中安装

/install loss-items-query-ailifeassistant

功能描述

查询待复购商品/ 待购买商品 /资损品物品列表/商品补货，支持分页、状态、排序等参数。直接调用你的业务 HTTPS 接口。

使用说明 (SKILL.md)

Loss Items 查询技能

能力

当用户说以下任意关键词时触发：

“待复购商品/需要购买的复购商品 / 复购商品 / 待购买物品 / pending”
“查询第几页的 loss items”
“due remind 的物品”、“status=pending 的列表”等

执行逻辑（必须严格遵守）

从用户消息中提取参数（默认值见下）：
- page（默认 1）
- size（默认 20）
- status（默认 pending）
- sort（默认 due_remind_at）
- include_deleted（默认 false）
执行本目录下的 query_loss_items.py 脚本，传入以上参数。
把脚本返回的 JSON 转为自然语言总结回复用户（例如“共找到 12 条 pending 记录，第 1 页显示前 20 条...”）

示例对话

用户：查一下哪些需要复购的商品 → 调用 query_loss_items.py --status pending --page 1 --size 20 → 回复：当前有 8 条待复购的商品，最新 due remind 时间是...

用户：看第 2 页的物品 → 调用 query_loss_items.py --page 2

安全使用建议

This skill appears to do what it says: run a local Python script that calls your loss-items HTTPS API using LOSS_API_TOKEN. Before installing, verify: (1) the API host (https://pre-detailailifeast.alibaba-inc.com/...) is the intended business endpoint and not an unexpected external service; (2) the LOSS_API_TOKEN you supply has limited scope and is not reused for unrelated services; (3) your environment has the Python 'requests' package available or you provide it; (4) you are comfortable that responses printed by the script may be summarized and returned by the agent. If any of these are unclear, ask the skill author for confirmation or a signed, documented API endpoint and token-scope description.

功能分析

Type: OpenClaw Skill Name: loss-items-query-ailifeassistant Version: 1.0.0 The skill bundle is a standard implementation for querying an inventory management API. The Python script (query_loss_items.py) correctly retrieves an authentication token from environment variables and performs a GET request to a specific internal endpoint (alibaba-inc.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.

能力评估

✓ Purpose & Capability

Name/description request access to a loss-items API and the skill indeed only requires a single LOSS_API_TOKEN and runs a script that queries a loss-items HTTPS endpoint. No unrelated credentials or binaries are requested.

✓ Instruction Scope

SKILL.md strictly instructs extracting paging/status/sort parameters from the user, running the local query_loss_items.py with those args, and summarizing the returned JSON. The script reads only LOSS_API_TOKEN and calls the declared API URL; it does not access other files, config paths, or external endpoints beyond the business API.

ℹ Install Mechanism

This is instruction-only (no installer). It requires python3 (declared) and runs a Python script that imports 'requests' but the skill does not declare how to ensure the requests package is available. This is an operational gap (will fail if requests is missing) but not a security red flag. No downloads or arbitrary install URLs are used.

ℹ Credentials

Only LOSS_API_TOKEN is required and is used to authenticate the single API call — this is proportionate. Consider that the token grants access to the target business API; ensure the token's scope is limited and not a high-privilege or cross-service credential.

✓ Persistence & Privilege

Skill is not always-enabled and does not request persistent or system-wide privileges. It does not modify other skills or system configs.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install loss-items-query-ailifeassistant
安装完成后，直接呼叫该 Skill 的名称或使用 /loss-items-query-ailifeassistant 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

初始版本：支持 page/size/status/sort 参数，调用 pre-detailailifeast 接口，兼容复购商品查询关键词

元数据

Slug loss-items-query-ailifeassistant

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题