← Back to Skills Marketplace
query-1688-product-detail
by
1688AiInfra
· GitHub ↗
· v1.0.1
· MIT-0
289
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install query-1688-product-detail
Description
Query 1688 cross-border product details via AlphaShop API using productId extracted from URL or provided directly. **MUST be used for any user request involv...
Usage Guidance
This skill's purpose (querying 1688 product details via AlphaShop) matches its network calls, but there is a clear mismatch in how credentials are declared vs how the code reads them. Before installing or using it: 1) Confirm where you must place the keys — the code expects ALPHASHOP_ACCESS_KEY and ALPHASHOP_SECRET_KEY as environment variables, whereas the SKILL.md says to put apiKey/secretKey in the skill entries. 2) Ensure you store the keys securely (prefer the platform's secret storage for skill entries over plaintext env files) and verify whether OpenClaw will expose those values to other components. 3) If you are the integrator, consider patching the skill so its documentation, manifest, and runtime agree (prefer a single canonical config path). 4) Test the script in an isolated environment first and review that Authorization Bearer tokens are sent only to the stated AlphaShop endpoint. These inconsistencies are likely a configuration bug but should be fixed before trusting the skill with real credentials.
Capability Analysis
Type: OpenClaw Skill
Name: query-1688-product-detail
Version: 1.0.1
The skill is a legitimate integration for querying 1688 product details via the AlphaShop API (api.alphashop.cn). The Python script (query.py) implements standard JWT authentication using user-provided API keys and performs targeted data retrieval without any evidence of exfiltration, unauthorized execution, or malicious prompt injection.
Capability Assessment
Purpose & Capability
The skill claims to query 1688 product details via the AlphaShop API — that purpose matches the included code and network calls. However, the SKILL.md and README insist configuration is via skill entries using fields named apiKey/secretKey, while the Python code actually reads ALPHASHOP_ACCESS_KEY and ALPHASHOP_SECRET_KEY from environment variables. Registry metadata also lists no required env vars. This mismatch between claimed configuration surface and actual credential inputs is disproportionate and confusing.
Instruction Scope
SKILL.md instructs the agent to always use this skill for any 1688 product lookup and to prompt the user for keys if missing. The script instead exits with errors if the keys are not set (no interactive prompt). The SKILL.md also refers to storing keys in skill entries (apiKey/secretKey) but the runtime code looks at environment variables; this divergence means the runtime instructions the agent will actually follow are unclear and may cause failures or accidental disclosure if users put secrets in the wrong place.
Install Mechanism
There is no install spec (instruction-only install), which reduces installation risk. The package includes a requirements.txt (requests, PyJWT) — expected for the Python script. Nothing in the install footprint suggests downloads from untrusted URLs or arbitrary extracted archives.
Credentials
The skill effectively requires two secrets (AlphaShop access and secret keys), which is reasonable for an API client, but the manifest declared no required env vars and SKILL.md promotes alternate config fields. The code looks for environment variables named ALPHASHOP_ACCESS_KEY and ALPHASHOP_SECRET_KEY, and error messages reference both skill entries and env paths — causing ambiguity about where secrets should live. This ambiguity increases the risk of misconfiguration or secrets being stored in an unexpected location.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and has no special persistence privileges. It performs only outbound API calls to a single AlphaShop endpoint.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install query-1688-product-detail - After installation, invoke the skill by name or use
/query-1688-product-detail - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Clarified mandatory use of AlphaShop API for all 1688 product detail queries—browser scraping and other methods are forbidden.
- Documented required apiKey and secretKey configuration, with explicit setup steps and error handling for missing keys or account balance issues.
- Provided input parsing details, covering URL, single ID, and batch ID formats.
- Added example usage commands for querying by URL and product IDs.
- Emphasized proper configuration in OpenClaw and listed updated dependencies.
Metadata
Frequently Asked Questions
What is query-1688-product-detail?
Query 1688 cross-border product details via AlphaShop API using productId extracted from URL or provided directly. **MUST be used for any user request involv... It is an AI Agent Skill for Claude Code / OpenClaw, with 289 downloads so far.
How do I install query-1688-product-detail?
Run "/install query-1688-product-detail" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is query-1688-product-detail free?
Yes, query-1688-product-detail is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does query-1688-product-detail support?
query-1688-product-detail is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created query-1688-product-detail?
It is built and maintained by 1688AiInfra (@1688aiinfra); the current version is v1.0.1.
More Skills