Naver Shopping Search

Search for products on Naver Shopping. Use when the user wants to find product prices, links, or compare items in the Korean market.

Security Scan

The skill mostly does what it says (searches Naver Shopping using the official API), but there are inconsistencies in declared requirements and the runtime instructions that raise caution before installation.

Purpose & Capability

The skill's purpose (search Naver Shopping) matches the included Python script which calls Naver's openapi.naver.com. However registry metadata states no required environment variables or primary credential, while SKILL.md and the script clearly require NAVER_Client_ID and NAVER_Client_Secret. The lack of a declared primary credential in metadata is inconsistent with the code.

Instruction Scope

SKILL.md instructs running the script from a hard-coded absolute path (/Users/dryoo/.openclaw/...), which appears specific to the packager's machine and is not portable. The instructions require storing NAVER_Client_ID and NAVER_Client_Secret in a .env file; aside from that, the script only uses those env vars and makes a direct request to Naver's official API endpoint. The instructions do not attempt to read other system files or exfiltrate data to unexpected endpoints, but they reference environment variables that were omitted from the registry metadata.

Install Mechanism

There is no install spec; this is an instruction-only skill with a small Python script. No packages are downloaded or extracted during install, which is low risk.

Credentials

The script legitimately needs NAVER_Client_ID and NAVER_Client_Secret to call Naver's API, which is proportionate for the stated purpose. However the registry lists no required env vars or primary credential, creating an inconsistency that could confuse users about what secrets to provide. The skill does not request additional unrelated credentials.

Persistence & Privilege

The skill does not request always:true, does not modify other skills or system settings, and has normal agent-invocation settings. No elevated persistence or cross-skill modifications are present.

What to consider before installing

This skill's code is small and calls the official Naver Shopping API, which is expected. However: 1) SKILL.md and the script require NAVER_Client_ID and NAVER_Client_Secret but the registry metadata does not declare these — confirm before supplying credentials. 2) SKILL.md uses a hard-coded user path (/Users/dryoo/...), which you should replace with the actual path to the skill or run the script from its directory. 3) Review the script locally to ensure it matches the provided source and that you are comfortable providing only Naver API credentials (do not reuse high-privilege or broad credentials). 4) Prefer running the script in an isolated environment (e.g., dedicated account or container) the first time. If you need higher assurance, ask the publisher to correct the registry metadata to list the required env vars and provide a relative or generic run command.

Use this skill to search for products on Naver Shopping using the Naver Search API.

Usage

Run the search script with a query:

/Users/dryoo/.openclaw/workspace/skills/naver-shopping/scripts/search_shopping.py "상품명"

Options

• --display <number>: Number of results to show (default: 5, max: 100)
• --sort <sim|date|asc|dsc>: Sort order (sim: similarity, date: date, asc: price ascending, dsc: price descending)

Example

/Users/dryoo/.openclaw/workspace/skills/naver-shopping/scripts/search_shopping.py "아이폰 16" --display 3 --sort asc

Environment Variables

Requires the following in .env:

• NAVER_Client_ID
• NAVER_Client_Secret