SKU对比分析

SKU对比分析工具。支持SKU的时间维度、横向、导购等多维度对比分析。 核心能力： 1. 时间维度对比（本期vs上期、活动前后、月度环比） 2. 横向对比（多个SKU排名、标杆学习） 3. 导购维度对比（不同导购对同一SKU的销售差异） 4. 销售表现对比（销售额、销量、转化率） 5. AIoT数据对比（试用次数...

This skill appears to implement SKU comparison logic, but it imports a local API client and other skills using hardcoded absolute paths (e.g. /Users/yangguangwei/.openclaw/...), and it calls internal endpoints through get_copilot_data without declaring any required credentials. Before installing or running: 1) inspect or confirm the implementation of the imported api_client.get_copilot_data to see what network calls and auth it performs and where it sends data; 2) verify whether any credentials or tokens are required and why they were not declared; 3) note the hardcoded paths — they may fail on your machine or point to another user's workspace and could access unintended local files; 4) run the skill in a sandbox or with limited network access until you confirm it calls only intended internal APIs; 5) if you cannot review api_client and sku-store-analysis code, treat this skill as potentially exfiltrative and avoid granting it access to sensitive environments.

Type: OpenClaw Skill Name: retail-sku-comparison-analysis Version: 1.0.0 The skill contains hardcoded absolute file paths to a specific user's home directory (/Users/yangguangwei/) in compare.py for importing the api_client and sku-store-analysis modules. This is a security and portability flaw (vulnerability) that exposes the developer's environment details and makes the skill dependent on a specific local file structure, which could be exploited or lead to unexpected behavior in different environments. No clear evidence of intentional malice or data exfiltration was found.