单SKU门店分析

• Analyzed: Mar 26, 2026, 10:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: 12d78106787b9bc1d58a6b9f2fcf19dfc684cc8a3bb65600f295c6846627aea6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains a hardcoded absolute path to a specific user's directory (/Users/yangguangwei/.openclaw/workspace-front-door) in analyze.py to import the api_client dependency. This is a significant security and portability flaw that could lead to local path traversal or execution issues if the environment is manipulated. Aside from this vulnerability, the code and SKILL.md instructions appear to be a legitimate retail analysis tool for SKU performance and AIoT data.