← 返回 Skills 市场
xianyu-api-client-skill
作者
crab-xieyujin
· GitHub ↗
· v1.0.2
· MIT-0
167
总下载
1
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install xianyu-api-client-skill
功能描述
Secure and reliable API client for Xianyu Guanjia Open Platform with authentication, signing, and error handling.
安全使用建议
This skill appears to be a straightforward Python client for the Xianyu Guanjia API and only needs your app key and secret. Before installing: (1) Verify you trust the vendor/endpoint (https://goofish.pro / open.goofish.pro) because the client sends network requests there; (2) keep credentials in environment variables or a secrets manager and rotate them regularly; (3) review the bundled __init__.py (it is short and only performs signed POSTs) and test with a limited-permission/test account first; (4) note the small version mismatch between registry (1.0.2) and SKILL.md (1.0.3)—not necessarily malicious but worth confirming with the publisher. If you do not want the agent to call this autonomously, disable autonomous invocation in your agent settings.
功能分析
Type: OpenClaw Skill
Name: xianyu-api-client-skill
Version: 1.0.2
The skill bundle is a legitimate API client for the Xianyu Guanjia (Goofish) Open Platform. The Python implementation in `__init__.py` correctly handles MD5-based request signing and HTTPS communication with the official domain `open.goofish.pro`. The `SKILL.md` file provides helpful instructions for the AI agent, including safety guidelines that encourage requesting user confirmation before performing sensitive or high-cost operations.
能力评估
Purpose & Capability
Name, description, SKILL.md, and code all describe a Python API client for Xianyu (闲鱼管家). The required environment variables (XIAN_YU_APP_KEY, XIAN_YU_APP_SECRET) and the python binary are appropriate and expected for this purpose. The client talks to open.goofish.pro/api host, which matches the declared homepage (goofish.pro).
Instruction Scope
SKILL.md contains usage instructions limited to configuring keys (env or code), calling client methods, and confirmation flows for sensitive operations. The instructions do not ask the agent to read unrelated files, harvest other credentials, or exfiltrate data. Minor note: SKILL.md version (1.0.3) differs from registry version (1.0.2), which is likely benign but worth noting.
Install Mechanism
There is no install spec (instruction-only), which is low-risk. A Python source file is bundled; it uses standard library modules and makes HTTPS calls to open.goofish.pro. No external downloads, obscure URLs, or archive extraction are present.
Credentials
The skill only requires two environment variables: XIAN_YU_APP_KEY and XIAN_YU_APP_SECRET. Those are exactly the credentials needed to authenticate to the described API. No unrelated secrets or broad system credentials are requested.
Persistence & Privilege
The skill does not request permanent/always-on inclusion (always:false). It does not modify other skills or system-wide settings. Model invocation is enabled (platform default), which is normal for a user-invocable skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xianyu-api-client-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/xianyu-api-client-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Major documentation overhaul: migrated SKILL.md to structured markdown with detailed setup, usage, and troubleshooting guidance in Chinese.
- Clarified configuration requirements, direct code examples, and API prerequisites.
- Added explicit environment variable guidance and sample parameter notes for product creation.
- Enhanced descriptions of supported features, interaction flow, and safe practices.
- Increased emphasis on security, permission management, and error recovery strategies.
- Updated metadata for version 1.0.3 and improved compatibility notes.
v1.0.1
No significant code or configuration changes detected; documentation updated and improved.
- SKILL.md fully rewritten for clarity, structure, and comprehensive guidance.
- Enhanced documentation on authentication, API communication, and error handling.
- Added clear configuration, feature list, technical specifications, and security best practices.
- Included example code for initialization and product creation.
- Outlined integration notes and support steps.
- No functional or file-level changes in this release.
v1.0.0
Initial release of xianyu-api-client-skill:
- Provides a basic client for Xianyu Manager Open Platform API
- Supports configurable authentication key management
- Automatic MD5-based API signature generation
- Unified request/response handling and error management
- Secure key management with support for environment variable or config file loading
- Includes error retry mechanism and logging
- Designed as a foundation for other Xianyu-related skills
元数据
常见问题
xianyu-api-client-skill 是什么？
Secure and reliable API client for Xianyu Guanjia Open Platform with authentication, signing, and error handling. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 167 次。
如何安装 xianyu-api-client-skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xianyu-api-client-skill」即可一键安装，无需额外配置。
xianyu-api-client-skill 是免费的吗？
是的，xianyu-api-client-skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
xianyu-api-client-skill 支持哪些平台？
xianyu-api-client-skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 xianyu-api-client-skill？
由 crab-xieyujin（@crab-xieyujin）开发并维护，当前版本 v1.0.2。
推荐 Skills