Jd Price History

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill is a coherent JD price-history helper, with only minor user-notice items around optional dependency installation and promised monitoring features.

This appears safe to install for price-history assistance. Be aware that the skill lists Python/curl/requests as dependencies and advertises alert or monitoring features; if you use those features, check how reminders are stored and how to turn them off.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or using the skill may require local command-line tools and a Python package, even though no runnable code files are included in the artifact set.

Why it was flagged

The skill declares local binaries and a pip package despite being described as instruction-only in the registry context. This is a normal dependency pattern for web price querying, but users should notice that installation may involve Python tooling and a PyPI package.

Skill content
"requires": { "bins": ["python3", "curl"] }, "install": [{ "kind": "pip", "package": "requests" }]
Recommendation

Only install the dependency from your normal trusted Python package source, and confirm your OpenClaw client actually needs it for this instruction-only skill.

What this means

If these features are implemented by the runtime, product URLs and target prices may need to be stored or checked later.

Why it was flagged

The advertised alerting and batch monitoring features imply possible ongoing tracking or notification behavior, although the artifacts do not show hidden background code or privileged persistence.

Skill content
"低价提醒": 设置目标价格,降价时通知; "付费 (¥79/月):+ 批量监控 + API 访问"
Recommendation

Before enabling alerts or batch monitoring, confirm where watch-list data is stored, how notifications are sent, and how to disable or delete reminders.