Security checks across malware telemetry and agentic risk
The skill mostly matches a 1688 material-optimization tool, but it also handles sensitive credentials and ISV tokens in ways that are broader and riskier than the advertised workflow.
Install only if you are comfortable giving this skill a 1688 AK and having product prompts, IDs, and image URLs sent to 1688 gateway services. Prefer configuring credentials through a secure OpenClaw secret mechanism rather than pasting AKs into chat, avoid using the ISV token commands unless you specifically need them, and do not use the watermark-removal flow unless you own or are authorized to modify the images.
}, ensure_ascii=False, indent=2))
sys.exit(1)
handler = getattr(cmd_module, action, None)
if handler is None or not callable(handler):
# 只展示在该模块中定义的函数，排除 import 进来的
available = [name for name in dir(cmd_module)headers = {}
if token:
headers["Authorization"] = f"Bearer {token}"
resp = requests.patch(f"{gateway_url}/api/config",
headers=headers, json=payload, timeout=5)
return resp.ok
except Exception:66/66 vendors flagged this skill as clean.