test-publish-dev1

自动将商品从跨睿优质货盘铺货到Ozon电商平台。

This skill appears to automate a web UI to publish products, but has several issues you should verify before installing or running it: - Filename mismatch: SKILL.md references scripts/auto_distribute.py but the repo contains scripts/auto_distribution.py — fix or confirm the intended entrypoint. - Runtime dependencies: the included Python script uses Playwright and requires a browser engine; ensure those are installed in a controlled environment and update SKILL.md to declare installation steps. - Network target: the script connects to http://139.9.192.16:9089 (an IP) rather than an Ozon API — confirm that this endpoint is trustworthy and expected (it may be an internal control panel). Do not run against unknown network hosts from sensitive machines. - Hardcoded credentials: the script contains username/password 'test'/'123456'. Confirm these are safe test credentials; if real credentials are needed, require them via environment variables or a secure secrets mechanism instead of embedding them. - Inconsistent output messages: the script returns/saves screenshot.png but later prints a different filename (screenshot_form.png) — this indicates sloppy testing and you should run in an isolated environment first. If you still want to use it: review and correct the entrypoint, remove or secure hardcoded credentials, document and install Playwright/browser dependencies, and run the skill in an isolated or staging environment while you confirm the target endpoint is legitimate.

Type: OpenClaw Skill Name: test-publish-dev1 Version: 1.1.0 The skill contains hardcoded credentials ('test'/'123456') and connects via unencrypted HTTP to a raw IP address (http://139.9.192.16:9089/) in scripts/auto_distribution.py. While these appear intended for a development or testing environment as indicated by the 'test-publish-dev1' slug, they are significant security vulnerabilities. Additionally, there is a minor filename discrepancy between the instructions in SKILL.md (auto_distribute.py) and the actual script provided (auto_distribution.py).