← 返回 Skills 市场
query-1688-product-detail
作者
1688AiInfra
· GitHub ↗
· v1.0.1
· MIT-0
289
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install query-1688-product-detail
功能描述
Query 1688 cross-border product details via AlphaShop API using productId extracted from URL or provided directly. **MUST be used for any user request involv...
安全使用建议
This skill's purpose (querying 1688 product details via AlphaShop) matches its network calls, but there is a clear mismatch in how credentials are declared vs how the code reads them. Before installing or using it: 1) Confirm where you must place the keys — the code expects ALPHASHOP_ACCESS_KEY and ALPHASHOP_SECRET_KEY as environment variables, whereas the SKILL.md says to put apiKey/secretKey in the skill entries. 2) Ensure you store the keys securely (prefer the platform's secret storage for skill entries over plaintext env files) and verify whether OpenClaw will expose those values to other components. 3) If you are the integrator, consider patching the skill so its documentation, manifest, and runtime agree (prefer a single canonical config path). 4) Test the script in an isolated environment first and review that Authorization Bearer tokens are sent only to the stated AlphaShop endpoint. These inconsistencies are likely a configuration bug but should be fixed before trusting the skill with real credentials.
功能分析
Type: OpenClaw Skill
Name: query-1688-product-detail
Version: 1.0.1
The skill is a legitimate integration for querying 1688 product details via the AlphaShop API (api.alphashop.cn). The Python script (query.py) implements standard JWT authentication using user-provided API keys and performs targeted data retrieval without any evidence of exfiltration, unauthorized execution, or malicious prompt injection.
能力评估
Purpose & Capability
The skill claims to query 1688 product details via the AlphaShop API — that purpose matches the included code and network calls. However, the SKILL.md and README insist configuration is via skill entries using fields named apiKey/secretKey, while the Python code actually reads ALPHASHOP_ACCESS_KEY and ALPHASHOP_SECRET_KEY from environment variables. Registry metadata also lists no required env vars. This mismatch between claimed configuration surface and actual credential inputs is disproportionate and confusing.
Instruction Scope
SKILL.md instructs the agent to always use this skill for any 1688 product lookup and to prompt the user for keys if missing. The script instead exits with errors if the keys are not set (no interactive prompt). The SKILL.md also refers to storing keys in skill entries (apiKey/secretKey) but the runtime code looks at environment variables; this divergence means the runtime instructions the agent will actually follow are unclear and may cause failures or accidental disclosure if users put secrets in the wrong place.
Install Mechanism
There is no install spec (instruction-only install), which reduces installation risk. The package includes a requirements.txt (requests, PyJWT) — expected for the Python script. Nothing in the install footprint suggests downloads from untrusted URLs or arbitrary extracted archives.
Credentials
The skill effectively requires two secrets (AlphaShop access and secret keys), which is reasonable for an API client, but the manifest declared no required env vars and SKILL.md promotes alternate config fields. The code looks for environment variables named ALPHASHOP_ACCESS_KEY and ALPHASHOP_SECRET_KEY, and error messages reference both skill entries and env paths — causing ambiguity about where secrets should live. This ambiguity increases the risk of misconfiguration or secrets being stored in an unexpected location.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and has no special persistence privileges. It performs only outbound API calls to a single AlphaShop endpoint.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install query-1688-product-detail - 安装完成后，直接呼叫该 Skill 的名称或使用
/query-1688-product-detail触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Clarified mandatory use of AlphaShop API for all 1688 product detail queries—browser scraping and other methods are forbidden.
- Documented required apiKey and secretKey configuration, with explicit setup steps and error handling for missing keys or account balance issues.
- Provided input parsing details, covering URL, single ID, and batch ID formats.
- Added example usage commands for querying by URL and product IDs.
- Emphasized proper configuration in OpenClaw and listed updated dependencies.
元数据
常见问题
query-1688-product-detail 是什么？
Query 1688 cross-border product details via AlphaShop API using productId extracted from URL or provided directly. **MUST be used for any user request involv... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 289 次。
如何安装 query-1688-product-detail？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install query-1688-product-detail」即可一键安装，无需额外配置。
query-1688-product-detail 是免费的吗？
是的，query-1688-product-detail 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
query-1688-product-detail 支持哪些平台？
query-1688-product-detail 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 query-1688-product-detail？
由 1688AiInfra（@1688aiinfra）开发并维护，当前版本 v1.0.1。
推荐 Skills