Taobao Listing

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is mostly a local Taobao copywriting helper, but it generates fabricated sales, review, and certification claims that could lead to deceptive listings.

Install only if you are prepared to review and fact-check all generated copy. Do not publish generated sales numbers, ratings, certifications, buyer reviews, guarantees, or review-incentive tactics unless they are true, documented, and compliant with Taobao and advertising rules.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could publish false advertising or unsupported trust claims on a Taobao listing, creating platform, legal, and customer-trust risk.

Why it was flagged

The script fabricates sales volume, ratings, certifications, and buyer-review content and labels them as trust evidence, without requiring real supporting data.

Skill content
print("    · 累计销量 {}+".format(random.choice(["5万", "10万", "50万", "100万"])))
print("    · 好评率 {:.1f}%".format(random.uniform(97.5, 99.8)))
print("    · 通过国家质量检测")
print("    · ISO9001质量管理体系认证")
print("  💬 买家真实评价:")
Recommendation

Treat all generated metrics, certifications, reviews, and guarantees as placeholders; publish only claims backed by real product records, certifications, and verified reviews.

What this means

Following this guidance could violate marketplace policies or consumer-protection rules and distort customer reviews.

Why it was flagged

The operating tips recommend incentivizing positive reviews and asking users to modify reviews, which can manipulate marketplace trust signals.

Skill content
- 包裹内放好评卡(返现2-5元)
- 晒图好评额外返现
- 视频好评最高返现
...
- 48-72小时:礼貌请求修改评价
Recommendation

Remove or revise review-manipulation guidance; encourage compliant customer service and honest, non-incentivized feedback practices.

What this means

Product ideas, campaign details, or other entered text may remain on disk after use, especially on shared machines.

Why it was flagged

The helper stores command names and user-provided arguments in a persistent local history file.

Skill content
DATA_DIR="${TAOBAO_LISTING_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/taobao-listing}"
mkdir -p "$DATA_DIR"
_log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }
Recommendation

Document the local history file, provide a clear way to disable or clear it, and avoid entering sensitive business information unless local logging is acceptable.

What this means

Users may not know exactly which script backs the documented command or where the package originated.

Why it was flagged

The registry metadata does not establish source provenance or an install mechanism even though executable scripts are included.

Skill content
Source: unknown
Homepage: none
Install specifications: No install spec — this is an instruction-only skill.
Code file presence: 2 code file(s): scripts/script.sh, scripts/taobao.sh
Recommendation

Verify the package source before installing or running commands, and prefer a version with clear provenance and command-install documentation.