ClawHub

Mai Shopping Assistant

v1.0.1

Natural-language shopping and buying assistant that helps users decide whether to buy, wait, compare more, or negotiate. Use when the user says things like 我...

⭐ 0· 126·1 current·1 all-time
byhaidong@harrylabsj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (broad shopping advisor, negotiation support, subscription audit) align with the SKILL.md instructions. All referenced data sources (price trackers, sold listings, BBB, Whois, etc.) are reasonable for this purpose.
ℹ
Instruction Scope
SKILL.md is an instruction-only runtime spec that stays within shopping/advisory scope. It recommends checking external public sources and asking users for budget/timeline. One minor caveat: the 'Subscription Audit' step expects a list of the user's subscriptions and last-use dates — this implies the agent will need user-supplied account information or manual input; the skill does not instruct the agent to read arbitrary local files or environment variables.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing will be downloaded or written to disk by the skill itself.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. All external data access described is to public web services and marketplaces appropriate to shopping research.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent presence or system-wide configuration changes.
Assessment
This skill appears coherent and relatively low-risk: it only contains instructions for shopping research and negotiation and asks for no credentials or installs. Before using, be mindful that: (1) for subscription audits you should manually provide subscription lists or sensitive account details — do not paste passwords or account tokens into chat; (2) the skill may route Chinese-market requests to a separate skill (china-commerce-copilot) — review that skill's permissions before allowing any handoff; and (3) the agent may perform web lookups to public services (Keepa, eBay sold listings, BBB, Whois); if you do not want the agent to access the web, disable browsing or avoid supplying private data. Overall this is internally consistent with its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

buying-advicevk979dy3kv1xckctkzn1x57zthn83zmd2deal-checkvk979dy3kv1xckctkzn1x57zthn83zmd2entry-pointvk979dy3kv1xckctkzn1x57zthn83zmd2latestvk979dy3kv1xckctkzn1x57zthn83zmd2negotiationvk979dy3kv1xckctkzn1x57zthn83zmd2shopping-assistantvk979dy3kv1xckctkzn1x57zthn83zmd2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments