汽车配件 - 4S 指导价查询
Analysis
This skill appears to do what it claims: query a disclosed auto-parts price API, but users should notice it sends a VIN, parts list, and API key to an external service.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
import requests
The script depends on the Python 'requests' package, while the registry requirements only list python3 and there is no install spec. This is an under-declared dependency, not evidence of malicious behavior.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
appkey = os.getenv("JZ_API_KEY") ... params = {"apiKey": appkey,"vinCode": vin, "partsOeList": partsCodes}The script reads the user's API key from the environment and sends it as the credential for the disclosed service. This is expected for the integration, but it is still delegated account/API authority.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
PARTS_PRICE4S_URL = "https://erp.qipeidao.com/jzOpenClaw/getPrice4s" ... requests.post(PARTS_PRICE4S_URL, json=params, timeout=100)
The skill sends the API key, VIN, and parts-code list to a named external provider endpoint. This is disclosed and purpose-aligned, but users should understand the data leaves their environment.