← Back to Skills Marketplace
fdovarela

Mercado Público ChileCompra

by fdovarela · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ✓ Security Clean
224
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install mercado-publico-chilecompra
Description
Operate and assist across Chile's Mercado Público / ChileCompra supplier workflows using both the public API and the private supplier portal. Use when search...
Usage Guidance
This skill appears coherent and implements a read-only API helper plus conservative guidance for interacting with the private portal. Before installing: 1) Treat MERCADO_PUBLICO_API_TICKET as sensitive — provide it via secure secret storage and avoid committing it to repos. 2) If you plan to automate OTP retrieval, explicitly choose and verify the mailbox integration (Gmail/Graph/other) — the skill does not include mailbox credentials and requires you to configure and validate that provider; granting mailbox access to an agent is a separate consent decision. 3) The helper can write local cache files under skills/.../run/api-cache when you enable cache — set --cache-ttl 0 (default) if you don't want local persistence. 4) The skill’s guardrails state it will ask for explicit confirmation before any state-changing portal actions; verify that in your deployment/policy if you are restricting autonomous actions. 5) If you need higher assurance, review the included script (scripts/mercado_publico_api.py) yourself — it only calls the documented public API endpoints and contains retry/cache logic. Overall there are no unexplained environment accesses, remote install URLs, or covert exfiltration behaviors in the package.
Capability Analysis
Type: OpenClaw Skill Name: mercado-publico-chilecompra Version: 1.0.1 The skill bundle is a specialized tool for operating Chile's Mercado Público (ChileCompra) procurement portal. It includes a Python helper script (mercado_publico_api.py) for interacting with the official public API and extensive markdown documentation for navigating the supplier portal. While the skill handles sensitive authentication flows (ClaveÚnica and email-based OTP), the instructions in SKILL.md and the references/ directory consistently emphasize safety guardrails, requiring explicit human confirmation before any state-changing actions (e.g., submitting bids or accepting orders). The code is transparent, uses environment variables for secrets, and lacks any indicators of data exfiltration, obfuscation, or unauthorized execution.
Capability Assessment
Purpose & Capability
Name and description match the artifacts: the skill uses the public Mercado Público API (read-only) and provides guidance for cautious, authenticated portal operation. The single required env var (MERCADO_PUBLICO_API_TICKET) is exactly what the API helper needs. There are no unrelated credentials or binaries requested.
Instruction Scope
SKILL.md is cautious and scoped: it prefers API-first (read-only), instructs reusing authenticated sessions, and explicitly requires explicit user confirmation before any state-changing portal actions. It discusses automating OTP retrieval but requires the user to explicitly provide and validate an external 'otp-provider' integration; it does not itself include mailbox access code. Because OTP automation requires the user to configure an external mailbox integration, operators should consciously approve any mailbox access mechanism they wire into their agent.
Install Mechanism
No install spec — instruction-only plus a bundled helper script. Nothing is downloaded or executed from remote URLs during install; contained Python script uses only standard library modules. Low install risk.
Credentials
Only one required environment variable (MERCADO_PUBLICO_API_TICKET) is declared and used by the included CLI script. No unrelated secrets or config paths are requested. The documentation explicitly warns not to version the ticket and to keep token handling local.
Persistence & Privilege
The skill does write optional local cache files under its run/api-cache path when cache is enabled, but this is explained in references and controllable via flags (default TTL 0). 'always' is false and the skill does not request elevated persistent privileges or modify other skills' configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install mercado-publico-chilecompra
  3. After installation, invoke the skill by name or use /mercado-publico-chilecompra
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Harden public release: declare API ticket requirement in metadata, document local cache behavior, and de-scope bundled OTP inbox-reading helper in favor of generic/manual-fallback guidance.
v1.0.0
Initial public release: API-first + portal-assisted copiloto operativo for Mercado Público / ChileCompra suppliers.
Metadata
Slug mercado-publico-chilecompra
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Mercado Público ChileCompra?

Operate and assist across Chile's Mercado Público / ChileCompra supplier workflows using both the public API and the private supplier portal. Use when search... It is an AI Agent Skill for Claude Code / OpenClaw, with 224 downloads so far.

How do I install Mercado Público ChileCompra?

Run "/install mercado-publico-chilecompra" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Mercado Público ChileCompra free?

Yes, Mercado Público ChileCompra is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Mercado Público ChileCompra support?

Mercado Público ChileCompra is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Mercado Público ChileCompra?

It is built and maintained by fdovarela (@fdovarela); the current version is v1.0.1.

💬 Comments