Tianmao

Help users decide when Tmall is a good shopping choice based on product category, official store trust, brand preference, and platform fit. Use when the user...

Security Scan

The skill is internally consistent: it is an instruction-only decision helper about Tmall/Tianmao that requests no credentials, installs nothing, and its runtime instructions stay within the stated public-advice scope.

Purpose & Capability

Name, description, and instructions all describe public decision support about Tmall shopping choices. Nothing in the skill requests access to systems, credentials, or services unrelated to that purpose.

Instruction Scope

SKILL.md explicitly restricts actions to public decision factors and explicitly disclaims login, account access, cookie handling, order retrieval, browser automation, or persistence. The workflow and output format stay within that scope.

Install Mechanism

No install spec and no code files beyond small reference docs; this is instruction-only so nothing is written to disk or fetched during install.

Credentials

No required environment variables, credentials, or config paths are declared or referenced. The skill does not request secrets or unrelated permissions.

Persistence & Privilege

Flags are default (always:false), the skill does not request persistent presence or modify other skills/config, and it does not instruct storing data or acquiring long-lived tokens.

Assessment

This skill appears to do exactly what it claims: provide public, non-account decision advice about shopping on Tmall. It requests no credentials and installs nothing. If you need live page inspection, order history, coupon claiming, or any account-specific actions, do not rely on this skill — use a browser-based workflow or a skill that explicitly supports authenticated actions. Otherwise it is safe from a permissions/credential-exfiltration standpoint.

Help users judge when Tmall is the right platform from public shopping signals.

This is a low-sensitivity public skill. It focuses on public decision support and does not perform login, account access, cookie handling, order retrieval, coupon claiming, local database persistence, or browser automation runtime actions.

Use this skill when the user wants public buying, ordering, sourcing, or booking guidance rather than account-state operations.

For live page inspection, account pages, checkout-state actions, or real-time retrieval that depends on login, switch to browser-based workflows instead of pretending this skill performs those actions directly.

Read these references as needed:

• references/official-store-guide.md for supporting guidance
• references/output-patterns.md for supporting guidance

Workflow

1. Identify the user's shopping, ordering, or booking need.

   • Accept a product, merchant, ride, store, or booking scenario.
   • If the request is too broad, ask one short clarifying question.

2. Focus on public decision-relevant factors.

   • Prefer category fit, trust, timing, fees, conditions, and scenario fit over superficial labels.

3. Explain trade-offs.

   • Say why the strongest option fits.
   • Mention meaningful risks or caveats.

4. Give practical next-step advice.

   • Tell the user what to verify before paying or placing an order.

Output

Use this structure unless the user asks for something shorter:

Best Option

State the strongest current choice.

Why

List the main reasons.

Caveats

List meaningful concerns or trade-offs.

Final Advice

Give a direct practical suggestion.

Quality bar

Do:

• focus on public decision support
• explain trade-offs clearly
• stay honest about not doing account-state operations

Do not:

• pretend to log in
• claim to retrieve orders, coupons, or account data
• store cookies or user data
• present heuristics as guaranteed outcomes