AliMerce 商城助手

• Risk level: Low
• Analyzed: May 10, 2026, 3:38 PM
• Findings: 0
• Version: 0.1.0
• Hash: aaebd6c714b3251767a8f3d0f4f6e91220cf18069961ce0dbeedf0852b76db29

Overview

This skill is not clearly malicious, but it exposes high-impact AliMerce store administration tools and an API-token path that are under-described in the user-facing metadata.

Install only if you intend to give this skill access to an AliMerce backend. Use a least-privilege API token, verify ALIMERCE_API_URL points to your intended server, and require human approval or logging for product, user, order, and customer-preference changes.