← 返回 Skills 市场
gwyang7

陈列货盘分析

作者 Xtechmerge.AI · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
117
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install retail-store-assortment-analysis
功能描述
陈列货盘分析工具。从货盘视角分析引起客户意向的商品和试用行为变化。 核心能力: 1. 三漏斗交叉分析(displayFunnel陈列SKU + behaviorFunnel试用次数 + customerFunnel客户) 2. 引起意向的商品变化(引起意向SKU数、引起意向SKU占比) 3. 客户对意向商品的试用...
安全使用建议
This skill appears to implement the claimed assortment/funnel analysis, but it depends on an external local module (imported from /Users/yangguangwei/.openclaw/workspace-front-door/api_client) that is not part of the skill and could perform network calls or use credentials you didn't intend to share. Before installing or running: 1) Inspect the api_client implementation at that absolute path (or require the skill to include a self-contained client) to see what hosts it calls and what credentials it reads. 2) Make the skill declare any API host and credentials it needs; prefer narrow-scope tokens. 3) Avoid running the skill in an environment where that local path contains unreviewed code — run in a sandbox or provide a vetted client implementation. 4) If you cannot review the external api_client, do not run this skill with access to sensitive credentials or a network with internal BI systems. If the skill is meant for your organization, ask the publisher to remove hard-coded absolute paths and explicitly document required configuration and credential scopes.
功能分析
Type: OpenClaw Skill Name: retail-store-assortment-analysis Version: 1.0.0 The skill is a retail assortment analysis tool designed to calculate SKU engagement and conversion metrics from store BI data. The code in `analyze.py` fetches data from a legitimate-looking API endpoint (`/api/v1/store/dashboard/bi`) and performs standard business logic calculations. While `analyze.py` contains a hardcoded absolute path to a specific user's directory (`/Users/yangguangwei/...`) for module imports, which is a non-portable coding flaw and a potential configuration risk, there is no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, and analyze.py are coherent: they implement store/assortment funnel analysis and call a BI endpoint (/api/v1/store/dashboard/bi). However, analyze.py imports get_copilot_data from an absolute local path (/Users/yangguangwei/.openclaw/workspace-front-door/api_client) that is not included in the skill bundle. Requiring an external local client without declaring it is an unexplained dependency.
Instruction Scope
SKILL.md and analyze.py instruct the agent to fetch BI data and compute metrics only — they do not ask the agent to read arbitrary unrelated files. BUT analyze.py will import and run code from a user-local api_client module, which may execute network requests or access credentials. The SKILL.md does not instruct how to provide the API host/credentials or explain what get_copilot_data does, giving the agent broad implicit discretion to use whatever that client does.
Install Mechanism
There is no install spec and no external downloads; the skill is instruction-plus-source only. That is lower risk than remote installers. The risk arises from relying on a local module outside the bundle rather than from an installer.
Credentials
The skill makes network calls to a BI endpoint but declares no required environment variables or credentials. This is disproportionate: either the skill should declare the API credential(s) it needs (and their minimal scopes) or include a self-contained client. As-is, it implicitly depends on existing local authentication (e.g., a token used by api_client), which may cause silent use of broader credentials than expected.
Persistence & Privilege
The skill does not request always: true and does not modify agent configs, which is good. However, importing and executing code from a hard-coded absolute path in a user's home directory allows that external code to run with the agent's privileges at runtime — effectively elevating the skill to execute arbitrary locally-hosted code. That is a notable privilege risk and should be explicitly addressed.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install retail-store-assortment-analysis
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /retail-store-assortment-analysis 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: 支持货盘吸引力、试用深度、成交效率分析
元数据
Slug retail-store-assortment-analysis
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

陈列货盘分析 是什么?

陈列货盘分析工具。从货盘视角分析引起客户意向的商品和试用行为变化。 核心能力: 1. 三漏斗交叉分析(displayFunnel陈列SKU + behaviorFunnel试用次数 + customerFunnel客户) 2. 引起意向的商品变化(引起意向SKU数、引起意向SKU占比) 3. 客户对意向商品的试用... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 117 次。

如何安装 陈列货盘分析?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install retail-store-assortment-analysis」即可一键安装,无需额外配置。

陈列货盘分析 是免费的吗?

是的,陈列货盘分析 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

陈列货盘分析 支持哪些平台?

陈列货盘分析 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 陈列货盘分析?

由 Xtechmerge.AI(@gwyang7)开发并维护,当前版本 v1.0.0。

💬 留言讨论