ClawHub

PriceTide

v1.0.0

Purchase-timing decision skill for mainland China shopping that judges whether a current price is a short-term low, a fair buy, a wait candidate, or not wort...

⭐ 0· 55·0 current·0 all-time
byhaidong@harrylabsj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, SKILL.md, README and metadata all consistently describe a buy-timing adviser focused on Taobao/Tmall/JD/PDD/etc. The skill does not request unrelated binaries, env vars, or platform credentials.
✓
Instruction Scope
SKILL.md instructs the agent to analyze public product pages, screenshots, and price clues and to produce a timing verdict. It explicitly states agents should not read account‑exclusive discounts or perform purchases. No instructions ask the agent to read arbitrary system files, secrets, or transmit data to unexpected endpoints.
✓
Install Mechanism
There is no install spec (instruction‑only). The only script is scripts/publish.sh which validates and publishes the skill using local clawhub and node tools; it performs no downloads or remote code execution. No archives or third‑party installers are fetched.
✓
Credentials
The skill declares no required environment variables, no credentials, and no config paths. Its functional needs (user-supplied product info, screenshots) align with this minimal environment footprint.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide configs, and is user-invocable only. Autonomous invocation is allowed (platform default) but combined with the skill's limited scope this does not raise concerns.
Assessment
PriceTide appears internally consistent and low risk: it does not ask for credentials or install remote code. Before using, remember it needs you to supply product links, screenshots, or price details to work; do not paste private account credentials or payment data into the chat. The included publish script is for authors and only checks for local tools (node, clawhub) — it does not download code. If you need the skill to act on your accounts (set reminders, auto‑claim coupons, or place orders), avoid providing account tokens because the skill explicitly states those actions are out of scope and require user action.

Like a lobster shell, security has layers — review code before you run it.

buy-timingvk970z0ds3gx3njbmgz5z094fdh847wnbdeal-timingvk970z0ds3gx3njbmgz5z094fdh847wnbecommercevk970z0ds3gx3njbmgz5z094fdh847wnbjdvk970z0ds3gx3njbmgz5z094fdh847wnblatestvk970z0ds3gx3njbmgz5z094fdh847wnbpddvk970z0ds3gx3njbmgz5z094fdh847wnbprice-historyvk970z0ds3gx3njbmgz5z094fdh847wnbshoppingvk970z0ds3gx3njbmgz5z094fdh847wnbtaobaovk970z0ds3gx3njbmgz5z094fdh847wnbwait-or-buyvk970z0ds3gx3njbmgz5z094fdh847wnb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌊 Clawdis
OSLinux · macOS · Windows

Comments