xianyu-automation-skill

Enterprise-grade automated operations for Xianyu stores with full lifecycle management and intelligent decision engine.

Things to consider before installing: 1) The skill promises a large automated feature set but the included code is minimal and contains TODOs—expect that much functionality is provided by other skills (xianyu-api-client-skill, xianyu-product-manager-skill) or not implemented. 2) It requires XIAN_YU_APP_KEY and XIAN_YU_APP_SECRET—only grant these to third-party skills after verifying the vendor and preferring a scoped/test account, not your main production credentials. 3) Because SKILL.md is vague about webhook and notification setup, ask how push events are handled and whether any public endpoint or inbound network configuration will be required. 4) Review the dependent skills' source (xianyu-api-client-skill and xianyu-product-manager-skill) to ensure they do what you expect and don't exfiltrate data. 5) Start in a constrained environment (sandbox or half-automatic mode), enable extensive logging, and monitor operations before switching to full automation. 6) Verify the publisher (homepage and owner) and request an implementation roadmap or additional code if you need the advanced features advertised.

Type: OpenClaw Skill Name: xianyu-automation-skill Version: 1.0.1 The skill bundle provides a high-level orchestration framework for automating Xianyu (Goofish) store operations, relying on external dependencies for actual API communication. The Python code in `__init__.py` contains standard logic for pricing adjustments and product management placeholders without any signs of malicious execution, data exfiltration, or obfuscation. The `SKILL.md` file defines user interaction flows and operational strategies consistent with the stated purpose, and while it uses marketing-heavy language, it does not contain harmful prompt injection instructions designed to hijack the agent or steal credentials.