← 返回 Skills 市场
Popmart Stock Monitor
作者
IIustrator
· GitHub ↗
· v1.0.0
· MIT-0
65
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install popmart-stock-monitor
功能描述
Monitor PopMart product restock status across multiple channels including WeChat Mini Programs, Taobao, JD.com, and Tmall. Use when user wants to track avail...
安全使用建议
This package looks like a plausible PopMart monitor but is incomplete and inconsistent. Before installing or running it: 1) Inspect missing pieces — the code references jd and tmall handlers that are not included and uses BeautifulSoup in taobao._check_via_scraping but the import is missing in that file; fix or remove broken imports. 2) Do not drop your API secrets into files or system-wide locations until you confirm the code actually uses them; prefer providing credentials via a secure mechanism (environment variables or a secrets manager) and review how they are consumed. 3) Avoid blindly following OpenClaw docs that copy files into system paths or run hard-coded user paths — run the code in a virtualenv or isolated container first. 4) Be cautious about scraping: platforms may block requests, and obey terms of service; using proxies/VPNs increases operational risk. 5) If you plan to use notifications, verify webhook targets (Feishu) and test with dummy webhooks. 6) If you are not comfortable auditing Python code, treat this skill as untrusted until a maintainer provides the missing handlers and demonstrates proper credential wiring and error handling.
功能分析
Type: OpenClaw Skill
Name: popmart-stock-monitor
Version: 1.0.0
The skill is a stock monitoring tool for Chinese e-commerce platforms that requires high-risk capabilities including network access, web scraping (via selenium/playwright), and the handling of sensitive API credentials for Taobao and JD.com. While the code in scripts/monitor_popmart.py and the platform handlers appears aligned with the stated purpose, the documentation (OPENCLAW_INTEGRATION.md) encourages the use of automated shell execution via OpenClaw's /exec and cron systems. Per the analysis criteria, these risky capabilities—even if plausibly needed for the task—warrant a suspicious classification in the absence of clear malicious intent.
能力标签
能力评估
Purpose & Capability
The skill claims to monitor Taobao, JD, Tmall, and WeChat and to use official APIs when available. It reasonably requests Taobao/JD API keys and Feishu webhook in docs, which fit the purpose. However, metadata declares no required env vars/credentials, and the Python code constructs platform handler instances without passing API keys from the provided config, so credentials would not actually be used. Also monitor_popmart imports jd and tmall handlers but those modules are not present in the package — inconsistent with the declared multi-platform capability.
Instruction Scope
SKILL.md instructs installing networked scraping tools, using proxies/VPNs, creating cron jobs, and copying the skill into system paths (e.g., into OpenClaw's skills directory). OPENCLAW_INTEGRATION.md contains hard-coded example paths (/Users/panda/...) and suggests commands that would execute files from a user's home; the docs also show running /exec on local files. Nothing in the instructions asks to read unrelated secrets, but the guidance to copy code into system directories and to create persistent cron jobs expands the runtime scope beyond an ephemeral script and should be treated cautiously.
Install Mechanism
There is no registry install spec; SKILL.md recommends pip installing requests, beautifulsoup4, selenium, and playwright (and references running `playwright install chromium`). This is a standard Python stack for scraping/browser automation and is not an unusual install pattern. There are no downloads from untrusted URLs in the package. However, playwright implies installing a browser binary which increases footprint; the package provides no packaged installer or requirements file — installation is manual and must be trusted by the user.
Credentials
The documentation and example configs request Taobao/Tmall and JD API keys and a Feishu webhook (appropriate for notifications). But registry metadata lists no required env vars/primary credential. The runtime code uses a config file (popmart_config.json) to hold API keys/webhook, but the monitor instantiates platform handlers without passing those keys, so the declared credentials are not actually wired. The mismatch between declared metadata and required secrets is suspicious and could lead users to put secrets in files unnecessarily. The docs also reference debug via DEBUG=true (an env var) that is not declared.
Persistence & Privilege
The skill itself does not request special platform privileges (always:false) and is user-invocable. The docs recommend setting up cron jobs or copying the skill into OpenClaw's skills directory for persistent monitoring; those are user actions but would create persistent execution. That persistence is user-driven rather than automatic from the skill metadata, but copying into system locations (example shows ~/.npm-global and hard-coded paths) is a potentially risky operational instruction and should be considered carefully.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install popmart-stock-monitor - 安装完成后，直接呼叫该 Skill 的名称或使用
/popmart-stock-monitor触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of PopMart Stock Monitor.
- Monitor PopMart product availability across WeChat Mini Program, Taobao, JD.com, and Tmall.
- Configurable product watch list, check intervals, and platform priorities via `popmart_config.json`.
- Notifies via Feishu, email, SMS, or desktop when items are restocked.
- Supports official APIs (when available) and web scraping with rate limit and anti-bot considerations.
- Flexible stock detection with false positive filtering and troubleshooting guidance.
元数据
常见问题
Popmart Stock Monitor 是什么？
Monitor PopMart product restock status across multiple channels including WeChat Mini Programs, Taobao, JD.com, and Tmall. Use when user wants to track avail... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 65 次。
如何安装 Popmart Stock Monitor？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install popmart-stock-monitor」即可一键安装，无需额外配置。
Popmart Stock Monitor 是免费的吗？
是的，Popmart Stock Monitor 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Popmart Stock Monitor 支持哪些平台？
Popmart Stock Monitor 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Popmart Stock Monitor？
由 IIustrator（@iiustrator）开发并维护，当前版本 v1.0.0。
推荐 Skills