Ecommerce Analyzer

Provides data analysis and monitoring for sales, prices, reviews, keywords, and competitors across major Chinese ecommerce platforms.

Security Scan

The skill's stated purpose (e-commerce scraping/analysis) is plausible, but important pieces are missing or inconsistent (no source/homepage, no install instructions despite listing selenium/pandas, no provenance), so proceed with caution.

Purpose & Capability

The SKILL.md describes scraping/analysis across multiple e-commerce platforms; _meta.json lists Python libraries (pandas, requests, selenium) that are consistent with that purpose. However the registry metadata claimed no required binaries or env vars and there is no install spec — Selenium typically requires a browser and driver (chromedriver/geckodriver) and possibly proxy/configuration; that system-level dependency is not declared. Absence of a source repo or homepage reduces provenance.

Instruction Scope

The runtime instructions in SKILL.md are narrowly scoped to analysis commands (商品分析, 竞品监控, 评论分析, etc.) and do not instruct the agent to read unrelated files or credentials. However they assert features like '实时监控' and '自动报告' without describing scheduling, notification endpoints, or how long-running monitoring should be performed — giving the agent broad discretion at runtime.

Install Mechanism

This is an instruction-only skill with no install spec. Yet _meta.json lists dependencies including selenium. There are no install steps, no mention of browser drivers, no trusted release URLs, and no guidance on environment setup. That mismatch is a red flag: the agent or integrator would need to supply system packages and drivers out-of-band, which is a potential setup and security gap.

Credentials

The skill requests no environment variables or credentials. For public scraping this may be sufficient, but many monitoring workflows rely on API keys, login accounts, proxy credentials, or anti-bot services — none are declared. The lack of declared secrets is not inherently malicious but is surprising given the stated capabilities and should be clarified.

Persistence & Privilege

always is false and user-invocable is true. The skill does not request persistent system-wide privileges or claim to modify other skills. No concerns here based on the available metadata.

What to consider before installing

This skill claims to perform cross-platform ecommerce scraping and analysis but is instruction-only and missing important implementation details. Before installing or using it: (1) ask the author for the source/repository and detailed install steps (including browser drivers for Selenium and any service endpoints); (2) do not supply credentials or secrets until you verify how they will be stored and used; (3) prefer running it in an isolated environment or sandbox and review any code prior to granting network access; (4) if you expect continuous monitoring, confirm how scheduling/notifications are implemented and where resulting data/reports are sent; (5) because the package is paid and has no provenance, demand more information about the developer and data-handling/privacy policies. The absence of regex scan findings does not imply safety — the skill has no code for the scanner to inspect, so manual review is necessary.

Ecommerce Analyzer - 电商数据分析工具

功能描述

电商数据分析工具，支持淘宝/京东/拼多多/抖音电商等平台数据分析。

使用场景

• 商品销售数据分析
• 竞品监控
• 价格趋势分析
• 评论情感分析
• 关键词优化
• 店铺运营分析

命令

商品分析

分析商品 商品 ID=xxx 平台=淘宝 时间范围=30 天

竞品监控

监控竞品 店铺 ID=xxx 平台=京东 监控项=价格，销量，评论

评论分析

分析评论 商品 ID=xxx 平台=拼多多 情感=正面/负面/中性

关键词优化

关键词分析 类目=女装 平台=淘宝 输出=top50 关键词

价格追踪

追踪价格 商品列表=ID1,ID2,ID3 平台=京东 通知=降价 5%

支持平台

• 淘宝/天猫
• 京东
• 拼多多
• 抖音电商
• 快手电商
• 亚马逊

分析维度

• 销售数据
• 价格趋势
• 评论情感
• 关键词排名
• 竞品对比
• 流量分析

输出格式

• Excel (.xlsx)
• CSV (.csv)
• PDF 报告

特性

• 实时监控
• 自动报告
• 价格预警
• 情感分析
• 数据可视化