Product Price Tracker
v1.0.0监控产品价格变化，自动对比历史价格并生成报告。支持价格搜索、历史追踪、变动提醒，适合竞品价格监控、商品降价提醒、价格趋势分析等场景。
⭐ 0· 101·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (price monitoring, history, reports) match the included CLI script and SKILL.md examples. The script implements product add/search/record/report features and references external agent tools (kimi_search, browser) only for web search/screenshot tasks, which is expected for this functionality.
Instruction Scope
SKILL.md and README instruct the AI Agent to call kimi_search and (optionally) the browser tool to gather price data; the Python script does not perform network calls itself. The README shows examples using exec(command="python3 ...") which assume the agent can run shell commands—this is typical but grants the agent the ability to run the script and any other commands it is authorized to execute. The skill also suggests adding a crontab entry under /root as an example; that is an installation suggestion, not an automatic behavior.
Install Mechanism
No install spec or remote download. The package is instruction + local Python script; nothing is fetched from external URLs or written to disk at install time beyond the provided files.
Credentials
No credentials or special environment variables are required. The script defaults to storing data under /tmp (PRICE_DB_FILE, PRICE_SCREENSHOT_DIR can be customized via environment variables). Storing monitoring data in /tmp may expose it to other local users and may be ephemeral; this is a functional choice but relevant to privacy/security.
Persistence & Privilege
always is false and the skill does not request persistent system privileges. It only reads/writes its own JSON file and screenshot directory (configurable). The skill does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: a local Python CLI that records prices and asks your agent to perform searches/snapshots. Before installing, consider: (1) the default DB and screenshots are stored under /tmp—move them to a secure, persistent path (set PRICE_DB_FILE and PRICE_SCREENSHOT_DIR) and tighten file permissions; (2) the README/SKILL.md show the agent running shell commands (exec(...)) and suggests crontab entries—only allow such actions for agents you trust and avoid installing as root or scheduling jobs in root's crontab unless intentional; (3) the script itself does not contact external endpoints or request credentials, but the agent’s use of kimi_search/browser will perform network activity—ensure you trust those tools and their configuration; (4) review the code if you plan to run it in multi-user or production environments (single-file JSON is not concurrency-safe). Overall, the skill is coherent but pay attention to data storage location and the agent’s ability to execute commands.Like a lobster shell, security has layers — review code before you run it.
latestvk97b5d2qwjes6k8mz5gzt2f0f983mqns
License
MIT-0
Free to use, modify, and redistribute. No attribution required.