Taobao Product Research
v1.0.0淘宝产品调研和数据采集工具。用于采集淘宝商品信息，包括主图、标题、价格、销量、评价数、店铺等，并生成包含图片的Excel报告。使用场景：(1) 市场调研和竞品分析，(2) 产品价格监控，(3) 销量数据统计，(4) 产品信息批量采集。当用户需要采集淘宝产品数据、进行电商调研、获取商品信息时触发此Skill。
⭐ 0· 107·0 current·0 all-time
bycharles@redcreen
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Taobao product research) match the implementation: the code performs browser automation, extracts product fields, downloads images, and writes an Excel file. Declared dependencies (playwright, exceljs, axios) are appropriate for these tasks.
Instruction Scope
SKILL.md instructs running the provided Node script, performing a manual Taobao login in a launched browser, and saving browser state. Instructions do not request unrelated files or external endpoints. Note: the tool takes screenshots and writes debug_*.png and browser_data (login/session data) to disk—these can contain sensitive page content and cookies.
Install Mechanism
There is no automated install spec in the registry metadata; the README instructs running npm install in the scripts folder. That will fetch Playwright and other npm packages from the public registry; Playwright's install will download browser binaries. This is expected for a Playwright-based scraper but means network fetch and binary downloads during install.
Credentials
The skill does not request environment variables, secrets, or unrelated credentials. It stores login/session data locally (browser_data) as part of normal browser automation; no evidence that it exfiltrates credentials or asks for unrelated service keys.
Persistence & Privilege
The skill persists browser profile/login data under its output directory (browser_data). always:false (not force-included). Persisting a logged-in session is expected for convenience but increases the sensitivity of files written by the skill; the skill does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says (automated browsing of Taobao and Excel report generation). Before installing or running it: (1) Review the script if you want assurance—it's shipped in clear text; (2) run it in a sandboxed or disposable environment if you don't want your Taobao login persisted in the skill folder; (3) be aware npm install will download Playwright and browser binaries from the network—only proceed if you trust those packages; (4) the tool saves screenshots, images, and browser_data (cookies/session) locally—treat these files as sensitive; (5) respect Taobao's terms of service and rate limits to avoid account blocks. If you want extra caution, run the script with a throwaway account or inspect/modify the code to change where browser data and screenshots are written.Like a lobster shell, security has layers — review code before you run it.
latestvk973xbwvykjkae46gs71pykqcx834193
License
MIT-0
Free to use, modify, and redistribute. No attribution required.