Ecom Monitor - 电商数据分析助手

电商数据分析助手 - 导入和管理商品价格数据，生成竞品分析报表，设置价格/库存预警。适用于竞品价格追踪、库存管理、销售报表生成。

Security Scan

The SKILL.md describes a Python-based e‑commerce monitor but the package contains only the instructions (no scripts or requirements), while instructing the agent to install arbitrary Python packages and install cron jobs and send alerts without declaring needed credentials — this mismatch is suspicious and requires caution.

Purpose & Capability

The described purpose (price/inventory monitoring, reports, alerts) is plausible for a Python tool, but the skill package contains only SKILL.md and no scripts, requirements.txt, or other code. The instructions expect many local files (scripts/, requirements.txt, config/) that are not present. Also the skill does not declare required binaries (python3, pip) even though they are required by the steps. This inconsistency between claimed capabilities and the actual package content is concerning.

Instruction Scope

Runtime instructions tell the agent to run pip install -r requirements.txt, execute numerous scripts (import_prices.py, generate_report.py, send_alert.py, setup_cron.py, etc.), and install scheduled jobs. Those actions can read/write local files, create persistent cron entries, and send outbound notifications. The SKILL.md asserts data is stored locally and not uploaded, but the send_alert step and unspecified alert channels (email, wechat) imply network transmissions and credential use that are not documented. Instructions are also vague about what exact network endpoints or credentials are needed.

Install Mechanism

There is no formal install spec in the registry (instruction-only), yet the skill instructs running pip install -r requirements.txt. Relying on a requirements.txt that is not provided forces users to fetch/install packages from PyPI or another source at runtime, which can install arbitrary code. Because the referenced requirements.txt and package files are missing from the bundle, it's unclear what will be installed — increasing risk.

Credentials

The skill declares no required environment variables or credentials, but its functionality (sending alerts via email/WeChat, possibly accessing third-party e‑commerce sites) would reasonably require SMTP/WeChat/API credentials and possibly platform API keys. The absence of declared env vars/config requirements is a mismatch and suggests missing documentation or hidden credential needs.

Persistence & Privilege

The instructions explicitly include a setup_cron.py --install step to register a periodic monitor (persistence). While persistence is reasonable for a monitor, the package gives no visibility into what the cron job will execute (the referenced script is not present). Installing persistent scheduled jobs without review is a material risk and should be permitted only after inspecting the script that will be scheduled.

What to consider before installing

Do not run the provided commands or pip install blindly. The SKILL.md references many scripts and a requirements.txt that are missing from the bundle — ask the publisher for the full package (scripts/, requirements.txt, config/) and inspect those files first. Before installing or running: 1) review requirements.txt to see what packages will be installed; 2) open every referenced script (especially setup_cron.py and send_alert.py) to confirm they don't exfiltrate data or perform unexpected network operations; 3) confirm what credentials (SMTP, WeChat, site APIs) are needed and only supply them in a secure way (not as plain-text files); 4) run the tool in an isolated environment (VM or container) and review any cron entries it creates; and 5) if you cannot obtain or inspect the missing files, treat the skill as untrusted and avoid installing it.

核心功能

本技能提供电商数据管理和竞品分析能力：

1. 价格管理 - 导入和管理商品价格数据，追踪历史变化
2. 库存管理 - 记录库存状态，设置缺货/补货预警
3. 报表生成 - 自动生成价格对比表、趋势分析图
4. 竞品分析 - 多店铺数据对比，定价建议
5. 预警通知 - 价格异常/库存变化时发送提醒

适用场景

• 管理竞品价格数据（淘宝/京东/亚马逊等）
• 追踪 SKU 库存变化
• 生成价格报表和趋势分析
• 分析竞品定价策略
• 发现市场机会

快速开始

1. 安装依赖

pip install -r requirements.txt

2. 导入价格数据

python3 scripts/import_prices.py --input products.csv --output data/prices.json

3. 生成价格报表

python3 scripts/generate_report.py --input data/prices.json --output report.html

4. 设置价格预警

python3 scripts/send_alert.py --config config/alerts.json --test

5. 配置定时任务

python3 scripts/setup_cron.py --install --interval 60

配置说明

基础配置 (config/config.json)

{
  "monitor_interval": 3600,
  "output_dir": "data",
  "alert_channels": ["email", "wechat"]
}

预警配置 (config/alerts.json)

{
  "price_alerts": [
    {
      "product_id": "123456",
      "condition": "price_drop",
      "threshold": 10
    }
  ],
  "stock_alerts": [
    {
      "product_id": "123456",
      "condition": "low_stock",
      "threshold": 50
    }
  ]
}

脚本说明

scripts/import_prices.py

导入商品价格数据，支持 CSV/JSON 格式

scripts/price_history.py

管理历史价格数据，生成趋势分析

scripts/generate_report.py

生成可视化价格报表（HTML）

scripts/generate_chart_report.py

生成带交互式图表的趋势报表

scripts/check_stock.py

检查和管理库存状态

scripts/send_alert.py

发送价格/库存预警通知

scripts/setup_cron.py

配置定时任务（自动化监控）

scripts/competitor_analysis.py

竞品分析引擎，定价建议

scripts/product_recommender.py

选品推荐引擎，发现潜力商品

数据目录结构

ecom-monitor/
├── data/
│   ├── prices.json          # 价格数据
│   ├── history.json         # 历史数据
│   └── reports/             # 生成的报表
├── config/
│   ├── config.json          # 主配置
│   ├── alerts.json          # 预警配置
│   └── products.csv         # 商品列表
└── logs/
    └── monitor.log          # 运行日志

注意事项

1. 数据安全 - 本地存储数据，不上传第三方
2. 隐私保护 - 仅处理用户提供的数据
3. 合规使用 - 遵守相关平台数据使用政策

扩展开发

添加新数据源：

1. 在 scripts/ 创建新的数据导入脚本
2. 统一数据格式到标准 JSON 格式
3. 更新配置支持新平台

---

版本：1.0.0 | 最后更新：2026-03-13