闲鱼全自动砍价助手

v1.0.1

闲鱼全自动砍价助手:帮助用户在闲鱼平台与卖家自动砍价。 支持:生成讲价话术、分析商品价值、多轮砍价策略、自动监控回复、智能跟进、批量砍价。 触发场景:闲鱼砍价、讲价、还价、二手交易谈价、"帮我砍价"、"自动砍价"、"批量砍价"、 "这个价格合理吗"、"怎么跟卖家讲价"、发送闲鱼商品链接询问价格。 全自动模式:设置...

2· 293·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (自动砍价 on 闲鱼) align with the runtime instructions: all actions target goofish.com pages using the platform's browser() and cron() tools, and message-generation is LLM-driven. There are no unrelated binaries, env vars, or external services requested.
Instruction Scope
SKILL.md explicitly instructs the agent to navigate pages, snapshot/parse chat messages, generate candidate replies, and (with user consent) create cron jobs that reopen pages and act. These behaviors are within the stated purpose. The instructions also read/write per-item JSON state files under ~/.openclaw/workspace/xianyu-bargain-state/, and require the agent to display candidate messages for confirmation before sending — the latter is a positive safety control. Note: the manifest metadata did not declare required config paths even though the instructions use workspace files.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is downloaded or written during install. This is the lowest-risk install mechanism.
Credentials
No environment variables, credentials, or external API keys are requested. The skill stores local state (item/chat history, seller IDs) in the user's workspace — reasonable for its function but a privacy consideration. No unrelated secrets or service credentials are asked for.
Persistence & Privilege
The skill persists state to ~/.openclaw/workspace/xianyu-bargain-state/ and can create cron jobs that run autonomously. The SKILL.md documents that cron/monitoring is disabled by default and must be explicitly enabled by user consent, which constrains autonomous activity. Users should be aware that consenting to cron creation grants the skill the ability to autonomously re-open pages, analyze replies, and send messages per its logic.
Assessment
This skill is coherent with its stated purpose and does not request external credentials or install code, but it does store per-item state (chat history, seller IDs, prices) in your local workspace and can create recurring cron tasks that run autonomously after you opt in. Before installing or enabling auto-monitoring: 1) Confirm you are comfortable with the skill writing files to ~/.openclaw/workspace/xianyu-bargain-state/ and storing chat history there; 2) Only enable cron/automatic monitoring for items you trust and limit the number of simultaneous tasks (skill suggests ≤3); 3) Keep autoAcceptWithinMax = false unless you understand the risk of automatic acceptance; 4) Verify the domain (goofish.com) is the intended target for your marketplace; 5) If you stop using the skill, delete the workspace state files and remove any cron jobs. The metadata omission (no declared config paths despite using workspace files) is a minor inconsistency — the behavior is expected for this kind of automation but you may want to confirm the platform’s storage/access model before enabling persistent cron tasks.

Like a lobster shell, security has layers — review code before you run it.

latestvk973p9fqead6ba7kbc7bq4qdf582xs9p

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments