Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ebay Price Check

v1.0.0

Search eBay for current and sold item prices, providing price range, shipping, condition filters, and price history summaries.

0· 305·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kl0nlutiy/ebay-price-check.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ebay Price Check" (kl0nlutiy/ebay-price-check) from ClawHub.
Skill page: https://clawhub.ai/kl0nlutiy/ebay-price-check
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install kl0nlutiy/ebay-price-check

ClawHub CLI

Package manager switcher

npx clawhub@latest install ebay-price-check
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The stated purpose (search eBay, current and sold prices, price stats) aligns with the included scripts which fetch eBay search pages and extract prices. However, SKILL.md explicitly says it uses eBay's public search API while the code performs HTML scraping of eBay pages via curl — this is an incoherence between claimed capability and implementation. package.json also lists a nonstandard dependency ('python3') in an npm-style dependencies block, which is misleading.
Instruction Scope
SKILL.md describes behavior at a high level and does not mention running the included local scripts; the included Python script actually runs curl to fetch eBay HTML and parses it locally. The instructions claim an API-based approach but the code scrapes HTML. The scraping logic uses a broad regex that will match many unrelated numbers in page HTML, so results can be noisy or inaccurate. The code does not read extra system files or environment variables beyond making network requests to eBay.
Install Mechanism
No install spec that downloads arbitrary code at runtime; this is an instruction-only skill with bundled scripts. package.json lists chmod steps but there is no automated installer that fetches remote artifacts. Risk from the install mechanism is low.
Credentials
The skill requests no environment variables or credentials — appropriate for a read-only price-checker. Network access is required (noted in SKILL.md) and the script reaches out to eBay directly; no unrelated secrets or services are requested.
Persistence & Privilege
The skill does not request always:true and has no special persistence or cross-skill configuration. It will execute only when invoked (user-invocable).
What to consider before installing
This skill is not overtly malicious, but it is inconsistent and buggy. SKILL.md claims use of eBay's public API but the code actually scrapes eBay HTML via curl — that may violate eBay's terms and will be more fragile. The Python script contains an obvious bug (calling .decode on a string), and the shell wrapper constructs an incorrect path (it references scripts/scripts/...), so the shipped code likely fails as-is. The price-extraction uses a very permissive regex and can return many non-price numbers, producing incorrect statistics. Before installing or running: (1) review and edit the code to correct path/decoding bugs; (2) consider using eBay's official API (with proper credentials) instead of scraping; (3) test the scripts in an isolated environment since they make outbound HTTP requests; (4) ask the author to fix SKILL.md to accurately describe scraping vs API usage. If you need guaranteed, accurate results or compliance with eBay policies, do not use this skill until it is corrected.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f59m0aewz3thd9qbqf6p3g582t2j4
305downloads
0stars
1versions
Updated 15h ago
v1.0.0
MIT-0

eBay Price Check Skill

Check eBay item prices, including sold listings for historical data.

Usage

Check current price of an item

/eBay price check iPhone 14 Pro Max 256GB

Check sold prices (historical data)

/eBay sold prices MacBook Pro 14" M3

Get price history summary

/eBay price history Samsung Galaxy S23

Capabilities

  • Search eBay for items by keyword
  • Get current listing prices (active listings)
  • Get sold prices (historical data from sold listings)
  • Price range analysis (min/max/average)
  • Shipping cost information
  • Item condition filtering (new, used, refurbished)

How it Works

  1. Searches eBay using their public search API
  2. Parses results to extract prices, titles, shipping costs
  3. For sold prices, filters by "Sold Items" category
  4. Returns formatted summary with price statistics

Notes

  • Requires internet connection
  • eBay may limit search frequency
  • Sold data may not be available for all items
  • Prices shown are in USD unless specified

Comments

Loading comments...