← 返回 Skills 市场
122
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install priceclaw
功能描述
Query and contribute to PriceClaw, a crowdsourced price database. Search prices, submit new price data, and vote on existing entries.
安全使用建议
This skill appears to do what it says (search and submit prices), but exercise caution before installing: 1) The skill's registry entry has no verified homepage/source — confirm https://priceclaw.io is legitimate before proceeding. 2) The skill will drive a browser OAuth flow and may write PRICECLAW_API_KEY to ~/.openclaw/.env or openclaw.json — only allow this after you verify the auth URL points to the official site and explicitly consent. 3) If asked, prefer the browser flow over pasting third-party access tokens; if you must provide a token, be deliberate and consider using a throwaway or scope-limited token you can revoke. 4) After setup, inspect ~/.openclaw/.env or openclaw.json to ensure the skill appended the key (did not overwrite other vars) and revoke the API key if you see unexpected activity. If you need higher assurance, ask the publisher/source for a verifiable homepage or repository before installing.
功能分析
Type: OpenClaw Skill
Name: priceclaw
Version: 1.0.3
The PriceClaw skill manages API authentication by instructing the agent to handle third-party access tokens (GitHub, Google, Discord) and persist API keys to the local filesystem (~/.openclaw/.env). While the instructions emphasize user consent and the actions are consistent with the stated purpose, the handling of sensitive credentials and filesystem modification are high-risk behaviors. The skill communicates with priceclaw.io.
能力标签
能力评估
Purpose & Capability
The name/description, required env var (PRICECLAW_API_KEY), and declared config paths (~/.openclaw/.env, openclaw.json) are consistent with a client that reads and writes a crowdsourced price DB. Minor inconsistency: registry metadata lists no homepage/source, but SKILL.md references https://priceclaw.io and its API docs — lack of a verifiable source increases risk.
Instruction Scope
SKILL.md stays on-task: it describes search, place resolution, submissions, voting, and an OAuth browser flow to obtain an API key. It explicitly instructs the agent to write the returned API key to the user's OpenClaw config only after asking for permission. This is within the stated scope, but writing to user config and polling an auth endpoint are sensitive operations and should only proceed with explicit user consent and URL verification.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes the risk of arbitrary code being downloaded or executed.
Credentials
Only one required credential (PRICECLAW_API_KEY) is declared, which is appropriate for a service that requires authenticated writes. The listed config paths are reasonable for persisting that API key. The SKILL.md cautions not to store third-party provider tokens — aligns with principle of minimal credential exposure.
Persistence & Privilege
always is false and model invocation is normal. The skill requests permission to write to the user's OpenClaw config (persisting the API key) but states it will prompt the user first. This is an expected behavior for a client that needs to persist an API key, but it is a sensitive action and should be confirmed by the user.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install priceclaw - 安装完成后，直接呼叫该 Skill 的名称或使用
/priceclaw触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
- Added new metadata to improve compatibility and environment requirements, required environment variables, supported OS, and config paths.
- Version updated from 1.0.2 to 1.0.3.
- No changes to skill logic or endpoints; documentation and usage remain the same.
v1.0.2
- small update to location filtering
v1.0.1
**Expanded authentication section and clarified permissions for improved security and transparency.**
- Added "Permissions & Scope" section — explicitly states what the skill does and doesn't access.
- Clarified that OAuth provider tokens are never stored; only the PriceClaw API key is retained.
- Browser OAuth flow is now the recommended auth method; direct token registration marked as alternative.
- Filesystem writes (API key persistence) now require explicit user confirmation.
- Added homepage and API docs links.
v1.0.0
Initial release of PriceClaw skill.
- Search and browse a crowdsourced price database for products and services.
- Submit new prices after resolving or creating the corresponding place.
- Vote on existing prices to corroborate accuracy.
- Supports OAuth-based and direct token registration.
- Includes endpoints for place resolution, price submission, feedback, and profile checks.
元数据
常见问题
PriceClaw 是什么？
Query and contribute to PriceClaw, a crowdsourced price database. Search prices, submit new price data, and vote on existing entries. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 122 次。
如何安装 PriceClaw？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install priceclaw」即可一键安装，无需额外配置。
PriceClaw 是免费的吗？
是的，PriceClaw 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
PriceClaw 支持哪些平台？
PriceClaw 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（linux, darwin, win32）。
谁开发了 PriceClaw？
由 RoundToo（@roundtoo）开发并维护，当前版本 v1.0.3。
推荐 Skills