Taobao and Tmall Product Reviews API

• Risk level: Low
• Analyzed: Apr 30, 2026, 4:10 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, instructions, and requested credential align with its stated purpose (calling JustOneAPI's Taobao/Tmall reviews endpoint) and there are no disproportionate requirements or hidden behaviors.

This skill appears to do exactly what it says: call JustOneAPI's Taobao/Tmall reviews endpoint. Before installing, confirm you trust JustOneAPI and are willing to provide JUST_ONE_API_TOKEN. The helper sends the token as a query parameter (potentially visible in logs or referer headers), so keep the token secret, do not paste it into chats or screenshots, and rotate it if you suspect exposure. If you need stricter privacy, verify whether the API supports passing tokens via an Authorization header or proxy the request through a trusted service that hides query parameters.