insight-ecom-oracle

灵犀电商专属 AI 助手，作为【Prompt 神谕武器库】的守护者， 根据用户需求精准检索并呈现高级商业视觉架构与提示词。

Security Scan

The skill's behavior largely matches its description, but it sends queries and user identifiers to an opaque third‑party gateway (no homepage or official host), which could expose data — verify the remote service before use.

Purpose & Capability

The skill claims to retrieve ecommerce 'master prompts' from an Oracle library and the code indeed performs search/recall via an external API. That capability aligns with the stated purpose. However, there is no homepage or official host, and the code POSTs queries to an opaque domain (sealosgzg.site) rather than an official, verifiable endpoint — this is unexpected for a published library and worth validating.

Instruction Scope

SKILL.md and the code instruct the agent to send the user's query and a user_id to a remote gateway and rely on that response to produce results. That is within the skill's functional scope, but it means user inputs (and any provided product example text/images if extended) are transmitted off‑platform to an unverified service — a potential data‑exfiltration risk that the documentation does not clearly disclose or justify.

Install Mechanism

This is an instruction‑plus‑script skill with no install spec or downloaded archives, and dependencies are limited to Python requests. Nothing is written to disk by an installer here; risk from install mechanism is low.

Credentials

The skill does not request environment variables, credentials, or config paths. It hardcodes two external URLs (the gateway and a payment link) in the script. Not requesting secrets is good, but hardcoded remote endpoints concentrate risk on network egress rather than credential misuse.

Persistence & Privilege

The skill is not marked 'always' and does not request elevated platform persistence. It does list 'exec' in skill.yml tools_required, which is unnecessary given the provided Python implementation; that mismatch should be clarified but does not by itself grant extra privileges.

What to consider before installing

This skill appears to do what it says (search a prompt library), but it forwards your search queries and a generated user_id to an external, non‑documented gateway (https://q3me0awfv7.sealosgzg.site/insight-ecom-gateway). Before installing or using it: - Do not send sensitive or proprietary product data through the skill until you verify the remote service and owner (no official homepage is provided). - Ask the publisher for the canonical API host, privacy policy, and source code repository; prefer skills hosted on verifiable domains (GitHub, official project domains). - Note the payment flow posts to afdian.com — payments occur outside the platform (expect manual reconciliation). - If you must test, run in a sandboxed environment with network monitoring so you can see what is transmitted. - The skill.yml claims 'exec' is required but the script does not appear to use shell exec; ask the author to explain or remove that tool requirement. If the owner provides a trustworthy, documented gateway (or self-hosted option), risk is lower; absent that, treat this skill as untrusted for confidential inputs.

灵犀电商 (Insight E-com) · Prompt 神谕武器库 (Oracle Library)

---

功能

作为【Prompt 神谕武器库】的守护者，根据用户的具体需求，通过多维度关键词召回精准检索并呈现最多 5 条商业视觉架构与提示词。

多维度召回策略

单次搜索自动生成以下召回变体，合并去重后最多返回 5 条：

• 原始关键词
• 原始词 + 材质 / 场景 / 风格
• 原始词 + 主图 / 详情页 / 短视频 / 商业摄影

若数据库不足 5 条，则显示实际匹配数量。

使用方式

寻找电商提示词 [关键词] 搜索神谕 [关键词] 灵犀神谕 [关键词] 想要 [关键词] 的提示词 获取 [关键词] 的架构

---

工作流程

1. 检查 user_id — 无 → 自动生成临时 ID，引导注册
2. 多维度召回 — 原始词 + 多种变体组合调用 LAF API
3. 分割与去重 — 从 API 返回内容中提取独立提示词块，基于 Role 行去重
4. 结果输出 — 最多 5 条，带序号依次展示；不足 5 条则显示实际数量

---

输出字段

字段	类型	说明
status	string	success / need_register / need_pay / expired / error
is_registered	bool	是否已注册
is_paid	bool	是否已支付
is_expired	bool	是否已过期
user_id	string	用户唯一标识
payment_url	string	支付链接
payment_status	string	已支付 / 未支付 / 已过期 / 连接超时 / 连接失败
data	array	搜索结果数组，每项为 {title, content, category}（仅 success 时有值，最多 5 条）
message	string	显示给用户的第一条格式化文字
chunks	array	完整消息数组（已按 3800 字自动拆分），用于完整发送所有内容

---

输出规范（按 status 分发）

✅ success — 正常用户

每条结果结构：

**【序号】** 📂 分类 | **style_tag**

[master_prompt 完整内容]

完整输出示例：

✅ 权限验证通过，共匹配到 2 条提示词：

━━━━━━━━━━━━━━━
👤 用户ID：user_62195428
📊 状态：已注册 ✅
💰 支付状态：已支付 ✅
━━━━━━━━━━━━━━━

**【1】** 📂 电商-产品图 | **电商-产品精修**

Role: 全球顶尖商业摄影数码后期总监 & CGI 材质表现专家 📥 Input (输入变量) 核心产品：{用户上传的产品原图} ...

—— 灵犀出品，必属精品

消息分条规则： 单条消息超过 3800 字时，自动拆分为多条，每条均包含完整账号信息 Header，master_prompt 绝不截断。

---

📋 need_register — 未注册

━━━━━━━━━━━━━━━
您的账号信息
━━━━━━━━━━━━━━━
👤 用户ID：user_xxxxxxxx
📊 状态：未注册
💰 支付状态：未支付
━━━━━━━━━━━━━━━
请按以下步骤完成注册：
1️⃣ 点击下方链接支付（199元/年）
→ https://afdian.com/order/create?plan_id=c27d1baa33c911f1a45652540025c377&product_type=0&remark=&affiliate_code=
2️⃣ 支付时【留言/备注】栏填写：
user_xxxxxxxx
3️⃣ 支付成功后，回复：
激活 user_xxxxxxxx
—— 灵犀出品，必属精品

---

💳 need_pay — 已注册（待激活）

━━━━━━━━━━━━━━━
您的账号信息
━━━━━━━━━━━━━━━
👤 用户ID：user_xxxxxxxx
📊 状态：已注册（待激活）
💰 支付状态：未支付
━━━━━━━━━━━━━━━
请复制上方用户ID，粘贴到爱发电支付留言框：
1️⃣ 点击支付链接（199元/年）
→ https://afdian.com/order/create?plan_id=c27d1baa33c911f1a45652540025c377&product_type=0&remark=&affiliate_code=
2️⃣ 留言内容：
user_xxxxxxxx
3️⃣ 支付后回复本消息，24小时内开通
—— 灵犀出品，必属精品

---

🔄 expired — 已过期

━━━━━━━━━━━━━━━
您的账号信息
━━━━━━━━━━━━━━━
👤 用户ID：user_xxxxxxxx
📊 状态：已注册（权限过期）
💰 支付状态：已过期
━━━━━━━━━━━━━━━
请按以下步骤续费：
1️⃣ 点击续费链接（199元/年）
→ https://afdian.com/order/create?plan_id=c27d1baa33c911f1a45652540025c377&product_type=0&remark=&affiliate_code=
2️⃣ 支付时【留言】填写：
user_xxxxxxxx
3️⃣ 支付成功后回复：
激活 user_xxxxxxxx
—— 灵犀出品，必属精品

---

⚠️ 未命中

✅ 权限验证通过

━━━━━━━━━━━━━━━
👤 用户ID：user_xxxxxxxx
📊 状态：已注册 ✅
💰 支付状态：已支付 ✅
━━━━━━━━━━━━━━━

🔍 目前神谕库尚未收录「[关键词]」相关的商业模型，
建议尝试更通用的关键词或联系魔童进行定制。

—— 灵犀出品，必属精品

---

作者

魔童 Kinsey · WeChat: kinseyho16