Rakuten Shop Analysis

用于分析 Rakuten 乐天店铺。用户提供店铺链接或 shopCode 时使用，适合竞品研究、店铺结构分析和快速出报告。

Security Scan

The skill's code and runtime instructions consistently implement a small CLI/skill that forwards a user-supplied Rakuten shop URL or shopCode to a single hosted backend for analysis; there is transparency about that network call and no unrelated privileges or hidden behaviors.

Purpose & Capability

Name/description state 'Rakuten shop analysis'. The skill asks for only Node on PATH and contains JS that sends shopInput to a hosted analysis API and returns structured results. All declared and actual requirements align with the stated purpose.

Instruction Scope

SKILL.md explicitly instructs the agent to send the shop link/shopCode to a hosted backend (https://rakuten.845817074.xyz) and forbids local scraping or ad-hoc scripts. The code implements exactly that flow. This is transparent but does involve transmitting user input to a third-party service — a privacy/data-exfiltration risk that the README/SKILL.md do disclose.

Install Mechanism

No install spec (instruction-only) and included files are small local JS modules and tests. There are no downloads from arbitrary URLs or archive extraction steps. Risk from install mechanism is low.

Credentials

The skill requests no environment variables or credentials and does not read unusual config paths. The absence of secrets is proportionate to the declared anonymous-hosted-backend usage.

Persistence & Privilege

always:false and no code to modify other skills or global agent settings. The skill can be invoked autonomously (platform default) but it does not request persistent elevated privileges.

Assessment

This skill is coherent and transparent: it will send whatever shop URL or shopCode you provide to the third‑party backend at https://rakuten.845817074.xyz for analysis (no token required). If you are comfortable with that data leaving your environment (shop identifiers, which may be non-sensitive), the skill is appropriate. If you need to protect proprietary shop identifiers or internal data, do NOT use this hosted backend — consider a locally-run analyzer or confirm the backend owner and privacy policy (check TLS cert and domain ownership). Also note the skill forbids local scraping and intentionally relies on the remote service, so its usefulness depends on trusting that third party.

分析 Rakuten 乐天店铺，并返回结构化结果。

适合用于：

• 店铺分析
• 竞品研究
• 爆款样本查看
• 快速出分析报告

支持输入：

• 乐天店铺链接
• 乐天 shopCode

网络与隐私说明

• 这个 skill 会把你提供的店铺链接或 shopCode 发送到托管后端进行分析
• 当前托管后端域名：https://rakuten.845817074.xyz
• 当前版本不需要 token，走匿名试用模式
• 除了你输入的店铺标识和分析请求本身，不要求额外账号凭证

如何使用

安装后，直接对 OpenClaw 说：

分析这个乐天店铺：https://www.rakuten.co.jp/vacchetta-topkapi/

或者：

帮我出一份这个乐天店铺的分析报告：https://www.rakuten.co.jp/vacchetta-topkapi/

也可以直接输入 shopCode：

分析这个乐天店铺：vacchetta-topkapi

当前说明

• 安装后可直接匿名试用
• 当前匿名限额：每个 IP 每 60 秒最多 30 次 API 请求
• 如果限流，等待约 1 分钟后再试即可
• 当前版本不需要配置 token，也不需要配置后端地址

执行约束

• 必须使用 skill 自带执行入口，不要临时改用别的实现
• 不要 write_file 生成临时 JS/Python/Bash 抓取脚本
• 不要自行用 axios、fetch、https.request、cheerio、浏览器抓取等方式直接抓 Rakuten 页面
• 不要绕过 skill，自行拼接不存在的 API 主机、路径或参数
• 目标是调用托管分析服务并返回结果，而不是现场重写一个新的 Rakuten 抓取器