← 返回 Skills 市场
813
总下载
2
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install trendyol-admin
功能描述
Comprehensive management of Trendyol marketplace via API v2.0. Includes product lifecycle (create, update, delete, archive), stock/price management, order pr...
安全使用建议
This skill appears to be a straightforward API reference for Trendyol and is internally consistent. Before installing: 1) Be prepared to provide your Trendyol API_KEY and API_SECRET (Basic Auth) via the agent's secure credential store — do not paste keys into public places. 2) Confirm the agent will only send those credentials to Trendyol endpoints (apigw.trendyol.com / stageapigw.trendyol.com). 3) Remember Basic Auth base64 is reversible, so protect the raw credentials and Authorization header. 4) Review any logs the agent may produce to ensure secrets are not being leaked. If you need higher assurance, request the skill author to declare required env vars in metadata or to provide an explicit example of how credentials are expected to be supplied securely.
功能分析
Type: OpenClaw Skill
Name: trendyol-admin
Version: 1.0.1
The skill is classified as suspicious due to the explicit instruction in `SKILL.md` for the AI agent to use `curl` or inline Node.js/Python code for API execution. While intended for legitimate Trendyol API interactions, this capability introduces a significant prompt injection vulnerability that could lead to Remote Code Execution (RCE). An attacker could potentially craft prompts to the agent to execute arbitrary commands, read local files, or exfiltrate sensitive data (including the `API_KEY` and `API_SECRET` used for Trendyol) to external endpoints, even though no direct malicious intent is present in the skill's provided content.
能力评估
Purpose & Capability
The skill is presented as an API reference/knowledge base for Trendyol marketplace integration and the included SKILL.md + api_reference.md contain endpoints, auth, headers, payloads and rules consistent with that purpose. Nothing in the package requests unrelated cloud or system credentials.
Instruction Scope
Runtime instructions are limited to constructing Basic Auth headers, required request headers (User-Agent, storeFrontCode), using the listed base URLs, and executing requests via curl or inline code. The instructions do not ask the agent to read arbitrary local files, other credentials, or to transmit data to unexpected endpoints.
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes disk footprint and there is no archive-download or package installation to evaluate.
Credentials
The documentation describes use of API_KEY / API_SECRET (Basic Auth) and sellerId/User-Agent values but the skill metadata does not declare any required environment variables or a primary credential. This is not necessarily malicious (instruction-only skills commonly omit declared env vars), but it means the skill expects the agent or user to supply Trendyol credentials at runtime via whatever secret mechanism the agent platform provides. Ensure you only provide valid Trendyol API credentials and do not paste them into public logs.
Persistence & Privilege
always:false and no install behavior means the skill does not request permanent/system-wide presence or modification of other skills. Autonomous invocation is enabled by default but is not combined with other red flags here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trendyol-admin - 安装完成后，直接呼叫该 Skill 的名称或使用
/trendyol-admin触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Added mandatory storeFrontCode header for switching between national markets, with explicit codes for each supported country.
- Updated usage instructions to include the new storeFrontCode requirement in all API requests.
v1.0.0
Initial release of trendyol-admin skill: a knowledge base for Trendyol Marketplace API v2.0.
- Provides comprehensive documentation for managing products, orders, stock, returns, and customer questions on Trendyol via API.
- Details all required endpoints, authentication methods, headers, payload schemas, and best practices.
- Includes critical rules such as rate limits, JSON-only payloads, and image requirements.
- Serves as a reference for constructing correct API requests using external tools.
元数据
常见问题
trendyol-admin 是什么？
Comprehensive management of Trendyol marketplace via API v2.0. Includes product lifecycle (create, update, delete, archive), stock/price management, order pr... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 813 次。
如何安装 trendyol-admin？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trendyol-admin」即可一键安装，无需额外配置。
trendyol-admin 是免费的吗？
是的，trendyol-admin 完全免费（开源免费），可自由下载、安装和使用。
trendyol-admin 支持哪些平台？
trendyol-admin 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 trendyol-admin？
由 awelab（@awelab）开发并维护，当前版本 v1.0.1。
推荐 Skills