Price Watcher

Monitor product URLs to track and alert on significant price changes using a local watchlist without requiring API keys.

This skill appears to be what it claims: local price checks that fetch product pages and store a watchlist in ~/.openclaw/workspace/skills/price-watcher/watchlist.json. Before installing or running it, consider: (1) The scripts perform outbound HTTP requests to whatever URLs you add — if you add internal network addresses you could inadvertently cause requests to internal services (SSRF-like risk) — only add URLs you trust. (2) The tool writes the watchlist locally; protect that file if it contains sensitive notes. (3) The setup guide shows an optional cron example that posts results to a Discord webhook — the skill does not send data externally by default, but if you configure a webhook or other delivery, you must supply and trust that endpoint. (4) Web scraping can hit anti-bot blocks or violate site terms; use manual price entry where appropriate. (5) If you will allow autonomous agent invocation, be aware the agent could run these scripts and make network requests on its own; restrict or sandbox the skill if you have strict network or data policies. There is no sign of obfuscated code or hidden exfiltration in the provided files.

Type: OpenClaw Skill Name: price-watcher Version: 1.0.0 The price-watcher skill bundle is a legitimate tool for monitoring product price changes. It uses standard Python libraries (urllib, json, re) to fetch user-defined URLs, extract pricing information via regex and HTML parsing, and maintain a local watchlist. The scripts (add_product.py, check_prices.py) operate within the designated skill directory, and the documentation (SKILL.md, setup-guide.md) accurately reflects the code's functionality without any evidence of malicious intent, data exfiltration, or prompt injection.