ClawHub

Alibaba Shopping

v2.0.2

Help users choose the right Alibaba ecosystem platform first, then navigate Taobao, Tmall, or 1688 with browser-based product search, reviews, price comparis...

⭐ 0· 709·3 current·4 all-time
byhaidong@harrylabsj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the content: all files are guides for choosing between Tmall/Taobao/1688 and for browser-based search, review reading, price comparison and cart preparation. No unrelated credentials, binaries, or installs are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to use browser automation (openclaw) to extract public product data and, where logged-in state exists, to manipulate cart/coupons/address for pre-order previews. This is coherent with the declared purpose, but it necessarily accesses user-account pages and personal data (addresses, cart contents) when operating in a logged-in session — the skill does not request credentials but will act on whatever browser session is present. The skill includes safeguards (stop for CAPTCHA, handoff before payment, prompt for login) which reduce risk.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files that run on install. Low risk from installation: nothing is downloaded or written to disk by the skill itself.
✓
Credentials
No environment variables, credentials, or config paths are requested. The operations described (browser scraping, cart prep) do not require extra secrets in the skill metadata; they rely on the agent's browser session, which is proportionate to the stated capabilities.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges. It does not declare modifications to other skills or agent configs. Autonomous invocation is allowed by default but is not combined with additional broad privileges here.
Assessment
This skill is internally consistent with its shopping-assistant purpose, but it operates by inspecting web pages and — when a user is logged in — can read and act on your cart, coupons, addresses, and other account-visible data. It does not request credentials or perform payment, but before using it: 1) confirm you trust the skill source (repository/homepage links are provided but source is marked unknown in the registry), 2) only enable the skill when you intend to let an agent interact with your browser session, 3) review any order preview before completing purchase yourself, and 4) avoid using it while sensitive account actions (password entry, two-factor prompts) are in-progress. If you need higher assurance, ask for the skill's upstream repository or author verification before installing.

Like a lobster shell, security has layers — review code before you run it.

1688vk972w4phvkdtc0c8ae8csprma583yqbvalibabavk972w4phvkdtc0c8ae8csprma583yqbvchinavk97b46hkxn07gwxf158cgnfxq182mmzzecommercevk97b46hkxn07gwxf158cgnfxq182mmzzlatestvk972w4phvkdtc0c8ae8csprma583yqbvshoppingvk97b46hkxn07gwxf158cgnfxq182mmzzshopping-routervk972w4phvkdtc0c8ae8csprma583yqbvtaobaovk972w4phvkdtc0c8ae8csprma583yqbvtmallvk972w4phvkdtc0c8ae8csprma583yqbv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🛒 Clawdis
OSLinux · macOS · Windows

Comments