ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Novai360 跨境电商智能分析

v1.0.2

基于NOVAI360，提供跨境电商市场、产品、竞争及财务分析，支持品牌出海战略制定，每日限10次免费调用。

⭐ 0· 96·0 current·0 all-time
by@chopinau

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for chopinau/amazonasinanalysis.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Novai360 跨境电商智能分析" (chopinau/amazonasinanalysis) from ClawHub.
Skill page: https://clawhub.ai/chopinau/amazonasinanalysis
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install amazonasinanalysis

ClawHub CLI

Package manager switcher

npx clawhub@latest install amazonasinanalysis
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
The code (index.js) and manifest match the description: they POST user queries to a NOVAI360 /chat endpoint and fetch /skills. Requiring a remote API is coherent for an analysis service. Minor incoherences: manifest version is 2.0.0 while registry lists 1.0.2, and SKILL.md mentions '每日限10次免费调用' whereas manifest.limits.dailyCalls is 100.
!
Instruction Scope
The runtime instructions and index.js will transmit the user's input and the provided 'context' blob to an external API (default https://api.novai360.com). SKILL.md asserts '不存储敏感用户信息' but there is no technical control enforcing that; any sensitive data in input/context could be sent off‑platform.
✓
Install Mechanism
No install spec or third‑party downloads are present. The skill is instruction/code-only (index.js) and does not write files or run installers — low install risk.
!
Credentials
No credentials are requested (authentication: none) and NOVAI360_API_URL is optional, which is proportional. However, the skill's behavior (sending potentially sensitive context to an external service without auth) creates a privacy/credential‑exfiltration risk in practice. The skill asks for no secrets but will forward whatever context the agent provides.
✓
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. It runs as a normal invocable skill.
What to consider before installing
This skill delegates analysis to a remote API (default https://api.novai360.com) and will POST both your query and the agent 'context' to that endpoint with no authentication. The SKILL.md claims data aren’t stored, but there is no technical guarantee here. Before installing: avoid sending passwords, secrets, or other sensitive material through this skill; verify the publisher and service privacy policy if possible; note the manifest/README inconsistencies (daily limits and version). If you need tighter control, set NOVAI360_API_URL to a controlled proxy that logs/filters data, or test the skill thoroughly with non‑sensitive queries first.
✗
index.js:3
Environment variable access combined with network send.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk9769cnyhxx2a4cbjcz2kxyxv9843fs9
96downloads
0stars
3versions
Updated 3w ago
v1.0.2
MIT-0
@chopinau
latest
Download

LiteChat 智能分析技能 v2.0

进一步需求联系 vx:chaibusiness

描述

基于 NOVAI360 Cloudflare Workers 的智能跨境电商分析技能，集成 LLM 和 MCP 市场数据服务，提供市场分析、产品评估、竞争分析等功能。

功能

  • 市场机会评估
  • 竞争格局分析
  • 产品机会洞察
  • 财务可行性分析
  • 品牌出海战略
  • 自动调用 真实数据 工具获取实时市场数据

使用方法

  1. 输入您的产品或市场问题
  2. 系统将自动识别意图并调用相关工具
  3. 返回详细的 AI 分析报告

API 端点

  • POST /chat - 智能对话分析
  • GET /skills - 获取可用技能列表
  • GET /health - 健康检查

示例

输入:

帮我分析智能手表的市场前景

输入:

B09XYZ1234 这个产品怎么样

输入:

搜索蓝牙耳机的关键词趋势

限制

  • 全球高速访问
  • 集成 LLM 和 市场数据
  • 无需 API Key，直接使用

安全与认证

  • API 认证: 无需 API Key，直接使用
  • 环境变量 (可选):
  • 数据隐私:
    • 查询数据仅用于分析
    • 不存储敏感用户信息

安装说明

  1. 直接安装技能到 ClawHub
  2. 可选：设置 NOVAI360_API_URL 指向自定义 API 地址
  3. 开始使用

更新日志

v2.0.0 (2026-04-02)

  • 更新 API 路径配置
  • 简化代码结构

Comments

Loading comments...