Solo Ecommerce Agent

自动化管理多平台电商店铺，实现选品扫描、商品上架、客服回复和订单处理全周期运营。

What to consider before installing: - Data directory inconsistency: SKILL.md and many scripts expect ~/.qclaw/solo-ecommerce-data, but other scripts (init_agent.py, daily_report.py) use ~/solo-ecommerce-data and metadata.json lists data_dir as "solo-ecommerce-data". This will cause duplicate/missing data files and confusion — ask the author which path is canonical and verify where config.json and logs will actually be written. - Browser automation & Chrome remote debugging: The skill expects xbrowser automation and instructs running Chrome with --remote-debugging-port=9222. That gives the automation access to logged-in web sessions; if that debugging port is exposed on the network it can be abused. Only run remote debugging on a local, firewalled host and understand the risk to your browser sessions. - Credentials handling: Platform API keys (AppKey/AppSecret) and any cookies/session tokens are sensitive. The skill does not declare required env vars or a secure credential storage method. Decide where keys will be stored (and restrict file permissions), and prefer API-based integration with scoped credentials instead of storing full account login sessions if possible. - Stubbed implementations: Many scripts are placeholders with TODOs for real API calls and automation. Review any added automation code carefully (especially any code that will execute arbitrary scripts, upload files, or interact with third-party endpoints) before enabling auto-publish/auto-ship features. - Cron and automation cadence: The SKILL.md recommends high-frequency cron tasks (every 5 minutes, hourly). Start with disabled automation and trial runs to confirm behavior; enable only modules you trust and keep 'publish'/'ship' controls set to require manual review until you confirm correctness. - If you need to proceed: run the agent in an isolated account or environment first, verify which data_dir is used, inspect config.json for how credentials are stored, and do not expose Chrome remote debugging to the network. Ask the publisher to fix the data-dir inconsistency and to document exactly how to supply and protect platform credentials.

Type: OpenClaw Skill Name: solo-ecommerce-agent Version: 1.0.0 The skill bundle provides a legitimate framework for an e-commerce automation agent designed to manage tasks like product scanning, customer service, and order processing. The Python scripts (e.g., customer_service.py, init_agent.py, and daily_report.py) contain standard file I/O operations for local data management and lack any indicators of malicious intent, such as data exfiltration, obfuscation, or unauthorized remote execution. The instructions in SKILL.md and platform_guides.md are transparent and strictly aligned with the stated purpose of automating store operations via browser interaction.