← 返回 Skills 市场
Product Research
作者
Hagen Hoferichter
· GitHub ↗
· v1.0.0
846
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install product-research
功能描述
Identifies winning e-commerce products by analyzing social trends, regional demand, marketplace data, and prepares WooCommerce or Shopify store drafts accord...
安全使用建议
This skill appears to do what it claims, but it orchestrates other tools and will download upstream skills via npx. Before installing or running it: (1) verify and trust the referenced upstream skills (tavily-search, goplaces, api-gateway, shopify) — inspect their code and permissions; (2) provide API keys scoped to the minimum necessary permissions (avoid giving full-account keys where scoped keys are available); (3) be aware api-gateway requires additional OAuth connections for store operations — giving MATON_API_KEY alone is not sufficient but still provides access to that gateway; (4) prefer running this in an isolated environment or sandbox if you want to limit blast radius; and (5) note shopify is marked under maintenance in the skill, so prefer WooCommerce or manual deployment until upstream support is confirmed.
功能分析
Type: OpenClaw Skill
Name: product-research
Version: 1.0.0
The skill is classified as suspicious due to a potential prompt injection vulnerability identified in SKILL.md. The instructions for the AI agent to include 'user-provided affiliate URL' for Helium 10 and Jungle Scout (`[HELIUM10_LINK_OR_COUPON]`, `[JUNGLESCOUT_LINK_OR_COUPON]`) could be exploited by a malicious user to inject harmful links into the agent's output. While the skill itself does not generate or execute malicious content, it provides a mechanism for a user to reflect arbitrary URLs, which is a vulnerability. Other aspects, such as API key handling and dependency installation via `npx`, are standard for the platform and do not indicate malicious intent from the skill itself.
能力评估
Purpose & Capability
The name/description (e‑commerce product research + store draft creation) matches the requested binaries (node, npx for CLI orchestration) and the three API keys (trend provider, Google Places, api-gateway). The listed upstream skills (tavily-search, goplaces, api-gateway, shopify/woocommerce) align with the stated workflow.
Instruction Scope
SKILL.md limits actions to trend scanning, regional checks, marketplace gating, sourcing checks, and optional draft creation via api-gateway. It only reads the declared env vars (it even instructs explicit preflight checks) and describes blocked/fallback behavior when connections are missing. There are no instructions to read arbitrary system files or unrelated credentials.
Install Mechanism
The skill is instruction-only (no packaged install), but the runtime instructions call npx to install other ClawHub skills (network download + execution). This is expected for a Node/CLI-based orchestration skill, but it means code will be fetched at install time — review the referenced upstream skills before running those npx install commands.
Credentials
The three required env vars (TAVILY_API_KEY, GOOGLE_PLACES_API_KEY, MATON_API_KEY) directly map to the services the skill says it will use. The SKILL.md also documents that an API key alone may not be sufficient for api-gateway (OAuth app connections required), which limits unilateral power of a single key.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. There is no indication it will change other skills' configs or request permanent system-level privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install product-research - 安装完成后，直接呼叫该 Skill 的名称或使用
/product-research触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Major update: Transformed the skill from a general product-building toolkit into a focused orchestration tool for scouting, validating, and preparing e-commerce winning products.
- Renamed and repositioned as "product-spy" targeting e-commerce trend and dropshipping use cases.
- Completely rewrote purpose, workflow, and rules for orchestrating discovery, validation, and store listing based on data signals from integrated skills.
- Added strict input requirements, failure handling, API key checks, and output contracts for transparency and reliability.
- Enforced explicit outputs at each pipeline stage: trend analysis, regional demand, competition check, sourcing, creative, deployment.
- Removed most previous files and product frameworks in favor of a coordinated, code-driven orchestration model.
- Clearly documented integration, prerequisites, and troubleshooting steps for required APIs and marketplace connectors.
元数据
常见问题
Product Research 是什么？
Identifies winning e-commerce products by analyzing social trends, regional demand, marketplace data, and prepares WooCommerce or Shopify store drafts accord... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 846 次。
如何安装 Product Research？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install product-research」即可一键安装，无需额外配置。
Product Research 是免费的吗？
是的，Product Research 完全免费（开源免费），可自由下载、安装和使用。
Product Research 支持哪些平台？
Product Research 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Product Research？
由 Hagen Hoferichter（@h4gen）开发并维护，当前版本 v1.0.0。
推荐 Skills