Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

WallySmarter Product Detail

v1.0.1

通过WallySmarter查询Walmart商品详情,包含价格历史和销量趋势。当用户提到Walmart商品详情、沃尔玛产品数据、WallySmarter、沃尔玛价格走势、沃尔玛销量趋势、Walmart product detail, Walmart price history, Walmart sales tr...

0· 126·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for linkfox-ai/linkfox-wallysmarter-product-detail.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "WallySmarter Product Detail" (linkfox-ai/linkfox-wallysmarter-product-detail) from ClawHub.
Skill page: https://clawhub.ai/linkfox-ai/linkfox-wallysmarter-product-detail
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install linkfox-wallysmarter-product-detail

ClawHub CLI

Package manager switcher

npx clawhub@latest install linkfox-wallysmarter-product-detail
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Functionality (retrieving Walmart product details and history via a LinkFox WallySmarter API) matches the name/description. The code calls https://tool-gateway.linkfox.com/wallysmarter/productDetail which is coherent with the stated purpose.
!
Instruction Scope
SKILL.md describes calling the external LinkFox API and a feedback endpoint only — reasonable for the skill — but the SKILL.md and registry metadata do not mention the environment variable the code actually requires (LINKFOXAGENT_API_KEY). This mismatch between runtime instructions in references/api.md and the declared skill requirements is a scope/instruction inconsistency that can confuse users and hide the need to provide credentials.
Install Mechanism
No install spec; this is instruction-only with a small helper script. There are no downloads from untrusted URLs or archive extraction steps. Risk from installation mechanism is low.
!
Credentials
The code requires an API key via environment variable LINKFOXAGENT_API_KEY to authenticate to the LinkFox tool gateway. That credential is proportional to the skill's purpose, but the registry/skill metadata incorrectly lists no required env vars — an important inconsistency. No other unrelated secrets or system paths are requested.
Persistence & Privilege
Skill does not request persistent/privileged placement (always is false). It does perform outbound network calls to the LinkFox endpoints, which is expected for this tool and not elevated privilege on its own.
What to consider before installing
This skill calls an external LinkFox WallySmarter API and requires an API key via the environment variable LINKFOXAGENT_API_KEY, but the skill metadata incorrectly claims no env vars are required. Before installing or enabling: (1) confirm you trust the LinkFox domains (tool-gateway.linkfox.com and skill-api.linkfox.com) and the source of the skill; (2) verify how and where to obtain the API key and whether that key has minimal privileges; (3) be aware the skill will make outbound requests to those endpoints (potential data exposure); (4) ask the publisher to correct the manifest to declare LINKFOXAGENT_API_KEY as required so permission decisions are clear. If you cannot verify the provider or the API key origin, avoid enabling the skill or use an expendable/limited-scope key for testing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97258ttj6775y6fzgntxv2ncn858znh
126downloads
0stars
2versions
Updated 6d ago
v1.0.1
MIT-0

WallySmarter Product Detail

This skill retrieves detailed product information from Walmart via WallySmarter, including pricing history and sales volume trends.

Core Concepts

WallySmarter Product Detail looks up a single Walmart product by its ItemId and returns comprehensive product attributes along with historical pricing and sales data. This is a product-level deep-dive tool, complementing the broader linkfox-walmart-search skill that operates at the search/listing level.

Data scope: Returns current product attributes (title, price, brand, ratings, fulfillment type, etc.) plus historical stats when includeStats is enabled (default).

Non-structured output: The tool returns mixed structured and non-structured data. It does NOT support secondary analysis via @智能数据查询.

Parameter Guide

ParameterTypeRequiredDefaultDescription
productIdintegerYesWalmart Item ID. Found in product URLs: https://www.walmart.com/ip/<productId>
includeStatsbooleanNotrueWhether to include historical price and sales data

Product Data Fields

FieldDescription
titleProduct title
descriptionProduct description
priceCurrent selling price (USD)
wasPriceStrikethrough price (USD)
minPriceLowest price (USD)
brandBrand name
ratingAverage rating (0.0–5.0)
reviewsTotal review count
salesEstimateEstimated sales volume (units)
revenueEstimated revenue (USD)
sellerNameSeller name
fulfillmentTypeFulfillment: MARKETPLACE or WFS
productPageUrlProduct page URL
imageUrlProduct image URL
departmentNameDepartment category name
departmentIdDepartment ID
listingScoreListing quality score
contentScoreContent quality score
outOfStockStock status: 0=in stock, 1=out of stock
sponsoredAd flag: 0=organic, 1=sponsored
isBrandedBrand flag: 0=no, 1=yes
multipleOptionsAvailableVariant flag: 0=no, 1=yes
usItemIdInternal US Item ID
createdAtProduct creation timestamp
updatedAtLast update timestamp
statsHistorical price and sales trend data object

Usage Examples

1. Basic product lookup (with history) Get full details for a Walmart product including price and sales trends:

{"productId": 5177343351}

2. Product detail only (no history) Get product attributes without historical data for faster response:

{"productId": 5169493923, "includeStats": false}

Display Rules

  1. Present data clearly: Show product details in a structured format. Do not add subjective business recommendations unless asked.
  2. Price formatting: Display current price alongside wasPrice when available to highlight discounts. Always show USD symbol.
  3. Trend summary: When stats data is available, summarize price and sales trends (e.g., "Price dropped 15% over the last 30 days").
  4. Score context: Explain listingScore and contentScore in context (higher = better quality listing).
  5. Stock and fulfillment: Clearly flag out-of-stock items and fulfillment type (WFS vs Marketplace).
  6. Single product: This tool queries one product at a time. If the user needs multiple products, call the tool separately for each ItemId.

Important Limitations

  • Only supports lookup by Walmart ItemId (the numeric ID in the product URL)
  • Returns non-structured data — NOT compatible with @智能数据查询 for secondary analysis
  • Single ItemId per call; batch queries require multiple invocations
  • Historical data availability depends on WallySmarter's tracking coverage

User Expression & Scenario Quick Reference

Applicable — Walmart single-product deep-dive:

User SaysScenario
"查一下这个Walmart商品的详情"Basic product lookup
"这个沃尔玛产品最近价格走势如何"Price trend analysis
"WallySmarter查Walmart商品5177343351"Direct ID lookup
"沃尔玛这个产品销量怎么样"Sales estimate check
"Walmart product detail for item XX"English variant
"这个Walmart产品最近有没有降价"Price change detection

Not applicable — Needs beyond single product detail:

  • Walmart product search by keyword (use linkfox-walmart-search)
  • Bulk product comparison across multiple items simultaneously
  • Walmart seller account or advertising metrics
  • Real-time inventory or delivery estimates
  • Category-level market analysis

Boundary judgment: If the user has a specific Walmart product ID or URL and wants detailed attributes, pricing history, or sales trends, this skill applies. If they want to search/browse products by keyword or category, use linkfox-walmart-search instead.

Feedback:

Auto-detect and report feedback via the Feedback API when any of the following apply:

  1. The functionality or purpose described in this skill does not match actual behavior
  2. The skill's results do not match the user's intent
  3. The user expresses dissatisfaction or praise about this skill
  4. Anything you believe could be improved

Call the feedback API as specified in references/api.md. Do not interrupt the user's flow.


For more high-quality, professional cross-border e-commerce skills, visit LinkFox Skills.

Comments

Loading comments...