← 返回 Skills 市场
340
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install mjzj-sp
功能描述
卖家之家(跨境电商)服务商搜索
安全使用建议
Before installing, consider that the skill declares MJZJ_API_KEY as required even though its search endpoints are documented as public. If you supply MJZJ_API_KEY, the agent (or this skill) could use it to call authenticated endpoints such as sending private messages on your behalf. Only provide the key if you trust the skill's publisher and understand what that key allows (who can be messaged, rate limits, audit/logging). If you only need public search, ask the publisher to remove the API key requirement or mark the key optional so you don't expose credentials unnecessarily. Verify the domain/owner and prefer least-privilege (a dedicated token scoped to messaging if needed).
功能分析
Type: OpenClaw Skill
Name: mjzj-sp
Version: 1.0.2
The skill bundle provides legitimate functionality for searching service providers and sending messages on the mjzj.com platform. It defines clear API interactions with the domain data.mjzj.com and includes standard instructions for handling Snowflake IDs and intent routing. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力评估
Purpose & Capability
The skill claims to provide public service-provider search endpoints (no token needed) but the registry metadata marks MJZJ_API_KEY as a required primary credential. If the skill's purpose is only searching, an API key should not be required. The declared credential is only clearly needed for sending private messages (a separate mjzj-msg flow), so requiring it for the whole skill is disproportionate or at least misleading.
Instruction Scope
SKILL.md instructs the agent to call two public endpoints (/api/spQuery/getClassifies and /api/spQuery/queryProviders) and to use returned userSlug to call /api/message/sendMessage when contacting providers. It explicitly states queries are public and don't need tokens, yet also documents the Authorization header for messaging. That contradiction means runtime behavior could include authenticated messaging if the agent follows the linking guidance — potentially using the provided MJZJ_API_KEY to act on the user's behalf.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk by the skill itself and the static scanner had no code to analyze.
Credentials
Only MJZJ_API_KEY is requested (so surface area is small) but it is declared required even though the documented public query endpoints do not need it. Requesting a key that enables authenticated actions (sending messages) when the primary described capability is unauthenticated search is disproportionate and could enable message-sending without the user realizing.
Persistence & Privilege
The skill does not request always:true, has no install hooks, and does not request system config paths or other skills' credentials. It does reference another skill (mjzj-msg) but does not appear to modify other skills or system settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mjzj-sp - 安装完成后，直接呼叫该 Skill 的名称或使用
/mjzj-sp触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- 新增“服务商 → 私信”流程说明：明确可用返回的 userSlug 字段快速发起私信，并指明调用流程及鉴权要求。
- 意图路由提示词补充：在服务商查询后，可直接用 userSlug 发私信（需 mjzj-msg Skill）。
v1.0.1
**Reduced scope for public service provider search only**
- Skill now only supports service provider category listing and provider search; all product, label, and product publishing APIs removed.
- Only the following endpoints are available: `/api/spQuery/getClassifies` and `/api/spQuery/queryProviders`.
- No authentication (token) is required; all APIs are public.
- All ID fields must be handled as strings, including for query and response data.
- Updated documentation and prompt guidance to match simplified, search-only functionality.
v1.0.0
mjzj-sp 1.0.0 – Initial Release
- Provides seller service/provider/product/category queries and new product publishing for 卖家之家 (mjzj.com).
- Supports 7 public and authenticated API endpoints, including service/product/label queries and product/temporary file submission.
- Implements detailed interface usage, parameter formats, and error handling as outlined in the documentation.
- Enforces strict token and authority checks for sensitive operations (file upload, product application).
- Includes clear mapping of user intents/keywords to API calls for seamless integration.
- Provides workflow and error prompt templates for easy troubleshooting and compliance.
元数据
常见问题
卖家之家(跨境电商)服务商搜索 是什么？
卖家之家(跨境电商)服务商搜索. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 340 次。
如何安装 卖家之家(跨境电商)服务商搜索？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mjzj-sp」即可一键安装，无需额外配置。
卖家之家(跨境电商)服务商搜索 是免费的吗？
是的，卖家之家(跨境电商)服务商搜索 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
卖家之家(跨境电商)服务商搜索 支持哪些平台？
卖家之家(跨境电商)服务商搜索 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 卖家之家(跨境电商)服务商搜索？
由 mjzj-tec（@mjzj-tec）开发并维护，当前版本 v1.0.2。
推荐 Skills