← 返回 Skills 市场
guowaa223

Taobao Automation

作者 guowaa223 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
521
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install taobao-automation
功能描述
实现淘宝店铺运营选品分析、标题优化、数据监控、竞品监控及营销文案自动生成与推送。
安全使用建议
This skill's description and runtime instructions expect integrations (Feishu/WeChat pushes), scheduled background jobs, TTS, and web scraping, but the package declares no credentials, no install steps, and no config paths. Before installing or enabling it, ask the author to: (1) list exactly which credentials it needs (Feishu app ID/secret, WeChat tokens, TTS API keys, Taobao credentials or cookie management) and how they will be provided/stored; (2) explain how cron/scheduling is implemented and authorized; (3) provide concrete endpoints and rate-limit/backoff behavior for scraping and a statement on compliance with Taobao's terms; (4) supply an install spec or code for review so you can verify it won't exfiltrate ambient credentials. If the author cannot supply credentials and an install plan, consider the skill unsafe to enable for autonomous runs — at minimum restrict it to user-invoked mode and require explicit, per-run consent and manual credential input.
功能分析
Type: OpenClaw Skill Name: taobao-automation Version: 1.0.0 The skill bundle provides legitimate automation for Taobao shop management, including product analysis, competitor monitoring, and data reporting via Feishu. It utilizes standard OpenClaw capabilities such as web searching, fetching, and cron jobs for scheduled tasks, all of which are consistent with its stated purpose in SKILL.md. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.
能力评估
Purpose & Capability
The skill claims integration with Feishu/WeChat (for messages and calendar), Cron scheduling, TTS, Canvas image generation, and web scraping of Taobao/competitors — but the registry metadata requests no environment variables, no credentials, and provides no install mechanism. Integrations like Feishu and push notifications normally require API keys/app credentials; scraping Taobao at scale typically needs authenticated cookies, proxies, or rate-limit handling. The requested manifest is missing expected capabilities and artifacts for the stated purpose.
Instruction Scope
SKILL.md instructs the agent to perform web_search/web_fetch, run periodic cron-like tasks, push data to Feishu/WeChat, perform TTS and generate canvases. It gives no guidance on where to store or how to obtain API credentials, how to set up cron/background jobs, nor does it limit what pages or data may be collected. The instructions therefore overreach: they direct data collection and external transmission but do not specify required auth, endpoints, or safeguards.
Install Mechanism
This is instruction-only (no install spec, no code files), which minimizes on-disk risk but is also insufficient for implementing cron jobs, TTS engines, or canvas libraries. Without an install step, it's unclear how the skill expects scheduled tasks or TTS/Canvas to be provisioned on the host; this is an implementation gap rather than direct malware evidence.
Credentials
The skill declares zero required env vars / credentials despite referencing services that require secrets (Feishu/WeChat API tokens, TTS service keys, possibly Taobao session cookies or API credentials). That mismatch is disproportionate and suggests either the manifest is incomplete or the skill would attempt to use ambient credentials unexpectedly.
Persistence & Privilege
always is false and there is no request to modify other skills or system-wide settings. However, the skill expects scheduled/automated behavior (cron jobs and periodic scraping); since no installation mechanism is declared, it's unclear how scheduling is intended to be established or authorized. Autonomous invocation is allowed by default (not flagged alone) but combined with the missing credential/setup details increases risk.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install taobao-automation
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /taobao-automation 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
taobao-automation v1.0.0 - 首发上线,实现淘宝店铺运营全流程自动化 - 支持选品分析、竞品监控、标题优化、营销文案生成与运营报告推送 - 提供定时数据监控与飞书/微信智能提醒 - 内置多场景自动化和常用运营命令 - 集成Web抓取、Feishu API、TTS语音等多项技术能力
元数据
Slug taobao-automation
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Taobao Automation 是什么?

实现淘宝店铺运营选品分析、标题优化、数据监控、竞品监控及营销文案自动生成与推送。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 521 次。

如何安装 Taobao Automation?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install taobao-automation」即可一键安装,无需额外配置。

Taobao Automation 是免费的吗?

是的,Taobao Automation 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Taobao Automation 支持哪些平台?

Taobao Automation 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Taobao Automation?

由 guowaa223(@guowaa223)开发并维护,当前版本 v1.0.0。

💬 留言讨论