闲鱼全自动砍价助手
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill fits its bargaining purpose, but it can run recurring browser automation that sends messages from your logged-in Xianyu account, and the confirmation rules for later automated replies are inconsistent.
Install only if you are comfortable letting the agent operate your logged-in Xianyu chat. Keep automatic monitoring off unless you explicitly want it, confirm how later messages will be approved, avoid auto-accepting offers without review, and delete the local bargain state after the task is done.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could send or accept bargain messages on your behalf without you reviewing each later message, which may create unwanted commitments, annoy sellers, or trigger platform controls.
This instructs the agent to use browser automation to send negotiation messages, including acceptance and follow-up messages, automatically once monitoring is enabled. That conflicts with the broader confirmation language in the artifacts and creates an unclear approval boundary for account actions.
自动监控会每隔几分钟检查卖家回复并自动发送砍价消息 ... ACCEPT → 发送接受消息 ... COUNTER ... → 发送加价消息 ... RESPOND → 生成回复 → 发送 ... FOLLOW_UP → 发送跟进消息
Require a clear opt-in mode for auto-send, preview or approve every acceptance message, keep strict per-item limits, and make the confirmation policy consistent across all docs.
If enabled, the bargain monitor can continue running in the background until stopped or until its stop conditions are met.
The skill creates a recurring agent task that wakes up every five minutes to monitor and potentially continue the bargaining workflow. The artifacts disclose this and require explicit user consent, so it is a note rather than a standalone concern.
自动监控默认不启动。... 等待用户明确同意 ... cron({ action: "add", job: { ... schedule: { kind: "every", everyMs: 300000 }, ... payload: { kind: "agentTurn"Only enable automatic monitoring when you want ongoing activity, check active cron jobs, and use the provided stop commands when finished.
Messages sent by the agent will appear to sellers as coming from your Xianyu account.
The skill depends on the user's already logged-in Xianyu browser session and sends messages through that account. This is expected for the stated purpose, but it is delegated account authority.
前置条件 ... 已登录闲鱼网页版 (https://www.goofish.com) ... 输入消息 ... 点击"发送"
Use it only on item links you choose, review account/session access, and be aware of Xianyu platform rules before enabling automation.
Local files may contain private transaction details and chat history, and stale state could influence later automated decisions.
The skill stores per-item negotiation state, seller details, chat URLs, and conversation history in the local OpenClaw workspace for later monitoring.
~/.openclaw/workspace/xianyu-bargain-state/{itemId}.json ... "sellerId" ... "sellerName" ... "history": [ { "role": "buyer", "message": "..." } ]Review or delete the state directory after use, avoid storing unnecessary sensitive information, and ensure local device access is trusted.
