国内猪肉价格实时查询 - 即刻数据

PassAudited by VirusTotal on May 9, 2026.

Overview

Type: OpenClaw Skill Name: jike-pork-query Version: 1.0.0 The skill is a legitimate tool for querying real-time pork prices in China via the jikeapi.cn API. The Python script (scripts/pork_query.py) uses standard libraries to perform HTTP requests, handles API keys via environment variables or local configuration, and includes proper URL encoding for inputs. No evidence of malicious intent, data exfiltration, or dangerous execution patterns was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your Jike API key will be used when the skill makes price-query requests.

Why it was flagged

The script sends the configured Jike AppKey to the pork-price API as a URL query parameter. This is purpose-aligned and required for the service, but users should know the credential is transmitted to the API provider.

Skill content
params = {"appkey": appkey} ... url = f"{API_BASE_URL}{API_PATH}?{urllib.parse.urlencode(params)}"
Recommendation

Use a dedicated Jike API key with the minimum needed permissions, avoid sharing command output that might reveal credentials, and ensure the API base URL environment is not unexpectedly overridden.