Cart Optimizer
v1.0.0Optimize ecommerce cart top-up plans across promotions such as full-reduction, discounts, and coupons. Use when the user asks to 凑单、计算满减最优方案、比较多档优惠、推荐最低成本补单策...
⭐ 0· 164·0 current·0 all-time
byhaidong@harrylabsj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (凑单/优惠优化) matches the provided code and SKILL.md. The code implements threshold/discount calculations, rule comparison, candidate-item combination search, and advice formatting — all coherent with the stated purpose. No unrelated permissions or credentials are requested.
Instruction Scope
SKILL.md usage examples and commands map to the CLI and CartOptimizer API. The runtime instructions and code only operate on numeric inputs, rule objects, and candidate item lists; they do not read system files, environment variables, or send data externally.
Install Mechanism
There is no install spec; this is effectively an instruction+code bundle. The code is plain Node.js (cli.js, index.js) with no external network downloads or extract steps. No unusual install behavior detected.
Credentials
The skill declares no required environment variables, credentials, or config paths and the code does not reference process.env or other secrets. Requested access is proportionate to the task.
Persistence & Privilege
always is false and model invocation is allowed (platform default). The skill does not attempt to modify other skills, system settings, or persist credentials — no elevated persistence privileges are requested.
Assessment
This skill appears coherent and implements only local calculation logic for cart/coupon optimization. Before installing, consider: (1) Source trust — the package owner and homepage are unknown, so verify origin if you require provenance; (2) It runs as Node.js code/CLI on your agent-host — review or run it in a sandbox if you need to be extra cautious; (3) Functional limits — it uses simple enumeration with item limits/filters (max 20 candidates slice, maxItems defaults) so test with your real data to ensure it meets your needs; (4) It does not access accounts or network resources, but if you plan to extend it to fetch live product lists you should audit any added networking or credential use. Overall the package is consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97293n1jtmypxx8kmxmppvzmx82z9v1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.