Coupang Shopping Relay

v1.3.0

로그인된 Chrome browser relay로 쿠팡 검색, 비교, 장바구니 조회/추가/삭제/수량 변경, 주문 직전 검수를 수행하는 OpenClaw 스킬입니다. 쿠팡 쇼핑 자동화와 장바구니 정리가 필요할 때 사용합니다.

0· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Coupang shopping/cart automation via a logged-in Chrome session) aligns with the content of SKILL.md and reference docs. There are no unrelated environment variables, binaries, or install steps requested; all instructions focus on browser-relay actions that are appropriate for a shopping-relay skill.
Instruction Scope
Instructions are detailed and stay within the shopping/carts domain (search, select, add/delete/qty-change, pre-check). Notable behaviors: (1) batch mode will autonomously add multiple items to the user's cart without per-item confirmation, and (2) the skill repeatedly captures snapshots/screenshots of the user's logged-in pages for verification. The SKILL.md does not instruct reading unrelated system files or environment variables. Because snapshots can include personal info shown in the browser (addresses, names, etc.), this is a privacy consideration — the docs do caution not to store sensitive fields, but the skill will still read and capture the active browser content.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is the lowest-risk install model: nothing is pulled from external URLs or written to disk by an installer.
Credentials
No environment variables, credentials, or config paths are requested. The only required capability is access to the user's logged-in Chrome browser relay — which is proportionate to the stated purpose but is a high-sensitivity permission because it lets the skill read and interact with pages in the user's authenticated session.
Persistence & Privilege
always:false and normal autonomous invocation are set (expected). The skill recommends keeping per-session 'operating memory' and logs but explicitly warns not to save sensitive fields. Users should verify where session logs/snapshots are stored by the platform (ephemeral vs persistent, who can read them). The skill does perform writes (cart modifications) in the user's account; this is part of its purpose but increases impact if misused.
Assessment
This skill appears coherent for a shopping assistant that uses your logged-in Chrome session. Before installing or enabling it, check the following: (1) you must allow the platform to control/read your logged-in Chrome — that lets the skill modify your cart and capture screenshots of pages that may contain personal data, (2) batch mode will add multiple items without asking for each one, so use with caution or disable/limit batch automation if you prefer per-item confirmation, (3) confirm where snapshots/logs/operating memory are stored and who can access them (ephemeral vs persistent backup), and (4) because the skill source is unknown, test it first on a non-critical account or with harmless requests to confirm behavior. If you need stronger guarantees, request the skill author to provide a source/homepage, a clear privacy statement, or an option to force per-item confirmations (disable batch auto-add).

Like a lobster shell, security has layers — review code before you run it.

latestvk97fskt6mjprn9w4rc31m6k84d8486wc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments