← 返回 Skills 市场
sorftime
作者
zhangfaguo
· GitHub ↗
· v0.1.9
· MIT-0
174
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install sorftime
功能描述
通过 sorftime-cli 调用 Sorftime 跨境电商全量数据接口（Amazon 43 + Shopee 5 + Walmart 13 = 61 个 endpoint）。 当用户或智能体需要：写脚本批量查询 ASIN/类目/关键词/Best Seller/跟卖/子体销量/产品评论， 自定义编排多个接口完...
安全使用建议
Before installing or using this skill: (1) verify the npm package and GitHub repo (maintainer identity, package contents, recent commits) to ensure the CLI is legitimate; npm packages run code on install, so review code or install in an isolated environment. (2) Confirm where sorftime-cli stores API keys (local config path, file permissions) and consider using a least‑privilege API key or dedicated profile. (3) Be aware the CLI consumes paid credits/points for many monitoring endpoints—verify pricing and limits to avoid unexpected charges. (4) If you allow autonomous agent invocation, consider the agent's scope: it could call the CLI and make many queries (data exfiltration or costs). (5) If you need higher assurance, ask the publisher for the official homepage or signed release and inspect the package source before global installation.
功能分析
Type: OpenClaw Skill
Name: sorftime
Version: 0.1.9
The skill bundle facilitates the installation and execution of an external CLI tool (`sorftime-cli`) via global npm installation and complex shell scripts. Files like `SKILL.md` and `amazon-recipes.md` instruct the agent to run potentially dangerous commands, including shell loops and piping to `jq`, which could be exploited via shell injection if user-provided parameters are not strictly sanitized by the agent. While the behavior aligns with the stated purpose of e-commerce data analysis and lacks clear evidence of intentional malice, the high-risk execution patterns and reliance on external binaries present a significant security risk.
能力标签
能力评估
Purpose & Capability
Name/description, SKILL.md and resource files all describe calling the sorftime-cli to access Amazon/Shopee/Walmart endpoints. Required items (none declared) and the instructions (install npm package and add an API key) match the stated purpose—no unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md only instructs the agent to install/use the sorftime CLI and provides detailed CLI commands and endpoint docs. It does not direct reading unrelated files, exporting arbitrary environment variables, or posting data to unexpected endpoints. The doc does instruct the agent/user to supply a Sorftime API key via the CLI profile mechanism, which is coherent with the service.
Install Mechanism
There is no automated install spec in the skill bundle (instruction-only). The instructions recommend npm install -g sorftime-cli (an npm package and a GitHub repo are referenced). Installing an npm package executes code from the package/maintainer — expected for a CLI but worth verifying the package's authenticity and contents before installing.
Credentials
The skill declares no required environment variables. It does require the user to provide a Sorftime API key to sorftime add <profile> <api-key>. This is expected and proportionate. One missing detail in the docs is where/how the CLI persists the API key (config path/format); users should confirm this before use.
Persistence & Privilege
Skill is not marked always:true and does not request persistent platform privileges. It is user-invocable and allows autonomous model invocation (platform default). There is no instruction to modify other skills' configs or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sorftime - 安装完成后，直接呼叫该 Skill 的名称或使用
/sorftime触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.9
- 增加「安全说明」和开源仓库/npm 官方主页信息，明确 CLI 工具为开源可审计，并由官方认证账号发布
- 认证步骤新增官方获取 api-key 的指引链接
- 细化 CLI 工具安装说明，推荐全局安装
- 其余接口分流、目录结构、错误码与调用规范无变更
v0.1.8
- Major update: Resource directory restructured with more granular endpoint files and public reference separation.
- Added comprehensive resources directory with per-endpoint API descriptions for Amazon, Shopee, and Walmart.
- Expanded SKILL.md: detailed trigger keywords, CLI account management, resource file index, and improved interface documentation.
- Obsolete or integrated agent resource file removed.
- Now supports a total of 61 documented endpoints across all platforms.
- Common CLI templates, domain tables, and error codes refactored for easier cross-reference.
v0.1.7
- 移除了“安装 CLI”步骤说明，精简认证说明，仅保留账户添加与激活命令
- 文档其他内容未变，未涉及功能、接口或命令调整
v0.1.6
No file changes detected in this release.
- Skill description and documentation streamlined for clarity and concise CLI usage.
- Focus shifted to command-line tool instructions (`sorftime-cli`), including installation, authentication, and command examples.
- Clear mapping of functional modules to corresponding resource files with trigger keywords.
- Compact Amazon, Shopee, and Walmart domain/site quick reference tables added.
- Usage rules clarified: always use correct domain values, wrap JSON params in single quotes, class tree queries require nodeId from CategoryTree.
- Monitoring APIs consumption clarified (points, not requests); emphasis on timeout settings for large responses.
v0.1.5
sorftime 0.1.5 Changelog
- Added skill manifest section to SKILL.md (YAML frontmatter with skill name, description, trigger keywords, and enabled flag).
- No other file or documentation changes detected.
- No functional or API changes included in this version.
v0.1.4
- Added full English translations to all core sections for international usability.
- Improved structure and formatting: all module titles and descriptions are now bilingual (Chinese/English) and easier to navigate.
- Updated API summaries and example usage to clearly show paths, key functions, and main APIs for each e-commerce platform.
- Expanded quick start and general notes sections to include bilingual instructions and error code explanations.
- Clarified and corrected some paths and naming conventions in the skill directory structure.
v0.1.3
- Added detailed SKILL.md documentation covering Sorftime's multi-platform API, features, usage scenarios, and skill breakdown by platform and function module.
- Provided comprehensive instructions for setup, API usage, and error handling across Amazon, Shopee, and Walmart platforms.
- Listed core use cases, supported sites, API endpoint groupings, and typical responses and errors for easier onboarding.
- Included guidance on account configuration, rate limits, credits system, and monitoring features.
元数据
常见问题
sorftime 是什么？
通过 sorftime-cli 调用 Sorftime 跨境电商全量数据接口（Amazon 43 + Shopee 5 + Walmart 13 = 61 个 endpoint）。 当用户或智能体需要：写脚本批量查询 ASIN/类目/关键词/Best Seller/跟卖/子体销量/产品评论， 自定义编排多个接口完... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 174 次。
如何安装 sorftime？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sorftime」即可一键安装，无需额外配置。
sorftime 是免费的吗？
是的，sorftime 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
sorftime 支持哪些平台？
sorftime 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 sorftime？
由 zhangfaguo（@zhangfaguo）开发并维护，当前版本 v0.1.9。
推荐 Skills