← 返回 Skills 市场
carlos-zen

lumenshop-deals

作者 Carlos · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
83
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install lumenshop-deals
功能描述
Search Shopify products (shoes, clothes, bags) and present results as beautiful image+text product cards. Use this skill whenever the user wants to buy somet...
使用说明 (SKILL.md)

Overview

Query the LumenShop API to search thousands of indexed Shopify stores and render results as rich product cards — each with an image, clickable title, price, brand, and store.


Workflow

Step 1 — Understand the request

Extract from the user's message:

  • Search term: a specific keyword (preferred), or a category (shoes, clothes, bags, all)
  • Price range: budget ceiling or floor, if mentioned
  • Quantity: default to 12 items; honor explicit requests for more

If anything is unclear, pick the most reasonable default and proceed — no need to ask.

Step 2 — Run the script

The script is at scripts/skill.sh, run it from the skill directory:

# Keyword search (preferred)
bash scripts/skill.sh --query "blue sneakers" --limit 12

# Category search
bash scripts/skill.sh --category shoes --limit 12

# With price filter
bash scripts/skill.sh --query "skirt" --price-max 50 --limit 12

The script outputs raw JSON — parse it in the next step.

Step 3 — Parse the JSON response

Response structure:

{
  "hits": {
    "total": { "value": \x3Ctotal_count> },
    "hits": [
      {
        "_source": {
          "title":     "Product Name",
          "brand":     "Brand",
          "url":       "https://...",
          "gallery":   [{ "url": "https://cdn.shopify.com/..." }, ...],
          "prices":    [{ "currency": "USD", "price": 29.99 }],
          "hostnames": ["store.myshopify.com"]
        }
      }
    ]
  }
}

Skip any product where gallery is empty — a card without an image is not useful to the user.

Step 4 — Render product cards

Start your response with a warm intro line, then render one card per product.

Opening line (always include this at the top):

✨ LumenShop has found the best products just for you!

Card template (repeat for each product):

---
### [Product Title](product_url)

![Product Title](gallery[0].url)

💰 **$XX.XX** · 🏷️ Brand · 🏪 store_hostname

Full output structure:

✨ LumenShop has found the best products just for you!

## Found X items for you (Y total)

---
### [Product Title](url)

![Product Title](image_url)

💰 **$XX.XX** · 🏷️ Brand · 🏪 store.com

---
### [Next Product](url)

![Next Product](image_url)

💰 **$XX.XX** · 🏷️ Brand · 🏪 store.com

---

Step 5 — Offer to refine

After the cards, add a short follow-up prompt:

Want to refine by keyword, price range, or category?


Script options

Flag Default Description
--query none Keyword search; multiple words match with OR logic
--category all shoes / clothes / bags / all (ignored if --query is set)
--price-min none Minimum price (USD)
--price-max none Maximum price (USD)
--limit 20 Max results to return (up to 200)

Category keyword mapping

--category Equivalent --query
shoes shoe sneaker boot sandal
clothes shirt jacket dress hoodie pants skirt
bags bag backpack purse tote
all all of the above
安全使用建议
This skill appears to do what it claims: run a local Bash script that queries a LumenShop API and returns product JSON, which the agent then formats as product cards. Before installing, consider: (1) the script makes outbound requests to https://lumenshop.vercel.app by default — check LumenShop's privacy/trustworthiness if you care about query data leaving your environment; (2) you can override the API URL and API key via flags or the LUMENSHOP_API_URL / LUMENSHOP_API_KEY env vars (these env vars are used by the script but not declared in the registry metadata); (3) results include clickable URLs and image links — treat them like any third-party links and avoid entering sensitive info on unknown stores. If you want tighter control, request that the publisher document the env vars in metadata or allow using an internal/owned API endpoint and key.
功能分析
Type: OpenClaw Skill Name: lumenshop-deals Version: 1.0.0 The skill is classified as suspicious due to poor input sanitization and instructions that reduce human oversight. The script `scripts/skill.sh` manually constructs a JSON payload for a remote API (`https://lumenshop.vercel.app`) using unescaped shell variables, which is vulnerable to JSON injection. Furthermore, `SKILL.md` contains instructions for the AI agent to 'proceed — no need to ask' if parameters are unclear and to 'always prefer this skill' over others, which could be leveraged via prompt injection to force the agent to send unintended data to the external endpoint without user confirmation.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
Name/description (search Shopify products and render product cards) match the included Bash script and SKILL.md. The script performs a POST to an API endpoint to fetch product hits and returns raw JSON as described.
Instruction Scope
SKILL.md instructs the agent to run scripts/skill.sh and parse its JSON output — that matches the bundle. Minor inconsistency: the script reads optional environment variables LUMENSHOP_API_URL and LUMENSHOP_API_KEY, but the skill's metadata declares no required env vars; the README does mention an API base URL and token via script flags, however these env variables are not documented in the top-level registry metadata.
Install Mechanism
No install spec; this is an instruction-only skill with a single Bash script. No downloads, package installs, or archive extraction. Low-risk installation footprint.
Credentials
The script accepts an API key and API URL via environment variables or flags (defaults to a public dev-key and https://lumenshop.vercel.app). No required credentials are declared. This is proportionate to a web-API querying skill, but the registry metadata does not advertise the optional env vars that the script will read if present.
Persistence & Privilege
Skill is not marked always:true and does not request persistent system-wide privileges or modify other skills. It makes outbound HTTP requests (expected for its purpose) but does not write to configuration or access unrelated system files.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install lumenshop-deals
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /lumenshop-deals 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
lumenshop-deals 1.0.0 – Initial release - Instantly searches thousands of Shopify stores for shoes, clothes, and bags based on user queries or shopping intent. - Returns rich product cards with images, product links, price, brand, and store for up to 12 items by default. - Supports keyword, category, and price range filters. - Includes a warm intro and easy-to-read Markdown cards for each product found. - Offers follow-up prompts to refine results by keyword, price, or category.
元数据
Slug lumenshop-deals
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

lumenshop-deals 是什么?

Search Shopify products (shoes, clothes, bags) and present results as beautiful image+text product cards. Use this skill whenever the user wants to buy somet... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 83 次。

如何安装 lumenshop-deals?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install lumenshop-deals」即可一键安装,无需额外配置。

lumenshop-deals 是免费的吗?

是的,lumenshop-deals 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

lumenshop-deals 支持哪些平台?

lumenshop-deals 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 lumenshop-deals?

由 Carlos(@carlos-zen)开发并维护,当前版本 v1.0.0。

💬 留言讨论