单SKU门店分析

单SKU门店分析工具。分析单个商品在指定门店的销售表现、库存状态、导购贡献和AIoT转化数据。 核心能力： 1. SKU基础信息（名称、款号、颜色、包型、标准价、上市日期） 2. 销售表现（销售额、销量、成交均价、贡献率、排名） 3. 库存状态（当前库存、在架天数、绑定状态） 4. 导购贡献（各导购销售额、销量、...

This skill's purpose (single-SKU store analysis) is plausible, but the shipped code imports an api_client from a hard-coded, user-specific path (/Users/yangguangwei/.openclaw/workspace-front-door). That indicates it expects local/internal SDKs or credentials that are not declared in the skill metadata. Before installing or running: - Inspect the api_client module (get_copilot_data): where does it send requests, how does it authenticate, and does it read local secrets or config files? Do not run the skill until you verify this. - Ask the publisher to remove the absolute path and either vendor the client or document required environment variables/config and the host(s) the skill will contact. - If you cannot obtain trustworthy answers, do not grant this skill access to sensitive environments; running it may cause requests to internal services or use credentials implicitly present on the host. - Prefer a version that declares its credentials, uses relative imports or a packaged dependency, and documents data retention and endpoints. If you need to use it now, run it in an isolated environment and monitor outgoing network calls.

Type: OpenClaw Skill Name: retail-sku-store-analysis Version: 1.0.0 The skill bundle contains a hardcoded absolute path to a specific user's directory (/Users/yangguangwei/.openclaw/workspace-front-door) in analyze.py to import the api_client dependency. This is a significant security and portability flaw that could lead to local path traversal or execution issues if the environment is manipulated. Aside from this vulnerability, the code and SKILL.md instructions appear to be a legitimate retail analysis tool for SKU performance and AIoT data.