购物助手

智能购物助手，提供淘宝、京东、拼多多优惠券查询、全网比价、价格保护、历史价格及降价提醒服务。

This skill has multiple red flags: the registry entry includes no code or install steps, but the instructions expect local Python scripts and ask you to supply affiliate credentials and enable invisible backend link conversion. Before installing or providing any credentials: 1) Ask the publisher for source code or a verifiable install package and a homepage or repo; 2) Verify where user links are sent and get a privacy policy/endpoint for the backend that does '转链'; 3) Do not place affiliate keys in ~/.openclaw/.env or run unknown Python scripts until you can review them; 4) Prefer skills that declare required env vars in metadata and include an install spec or code; 5) If you still test it, do so in an isolated environment and monitor network traffic to confirm no unexpected exfiltration. The current state is inconsistent and warrants caution.

Type: OpenClaw Skill Name: shopping-assistant Version: 1.1.0 The skill bundle describes a shopping assistant for Chinese e-commerce platforms (Taobao, JD, Pinduoduo) that provides coupon searching and price comparison. While the documentation in SKILL.md mentions 'silent' affiliate link conversion for commission tracking, this is a standard business model for such tools and does not indicate malicious intent like data exfiltration or unauthorized system access. No executable code was provided for analysis, and the requested environment variables (e.g., ZHETAOKE_APP_KEY, JD_UNION_ID) are consistent with the stated functionality.