一淘返利助手
v0.1.0一淘返利导购工具，阿里巴巴旗下官方返利平台，专注淘宝天猫购物返利和比价服务。
⭐ 0· 41·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name, description and SKILL.md all describe a cashback/price-comparison assistant; no unrelated permissions, env vars, or binaries are requested. However, the package provides no homepage, source link, or publisher verification despite claiming Alibaba official affiliation — this is unverifiable from the metadata and worth noting.
Instruction Scope
SKILL.md is instruction-only and only describes features, trigger words and an output format. It does not instruct the agent to read local files, access unrelated environment variables, or transmit data to external endpoints beyond the implied use of Taobao/Tmall services.
Install Mechanism
No install spec and no code files are present, so nothing will be downloaded or written to disk by the skill itself.
Credentials
The skill declares no required environment variables, credentials, or config paths — proportional for a read-only, instruction-only lookup assistant.
Persistence & Privilege
Default privileges (not always: true) and autonomous invocation allowed are normal. The skill does not request persistent system presence or modification of other skills.
Assessment
This skill appears internally consistent and low-risk because it contains only descriptive instructions and requests no credentials or installs. However: (1) the package gives no homepage or verified source but claims to be an Alibaba 'official' service — verify the publisher before trusting payouts or providing account details; (2) the agent may later need to call external APIs or ask you for product URLs — never provide your Taobao/Tmall login credentials or API tokens unless you confirm the skill's official origin; (3) if a future version adds installs, downloads, or asks for SECRET/TOKEN env vars, treat that as suspicious and re-evaluate before enabling.Like a lobster shell, security has layers — review code before you run it.
latestvk974g5ygaya94snxs9fa7h3s5583rx20
License
MIT-0
Free to use, modify, and redistribute. No attribution required.