Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pinduoduo Deal Finder

v1.0.0

拼多多神价发现、百亿补贴监控、多人团优惠、砍价免费拿进度追踪。适合省钱购物、副业套利。

0· 153·3 current·3 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description (Pinduoduo deal discovery, monitoring, multi-person groups, coupon claiming, bargain tracking) align with the described functionality. However actions like '领取隐藏优惠券' (claim hidden coupons), '砍价助力群' and continuous monitoring typically require login cookies, API credentials, or user interaction — yet the skill declares no required credentials or config paths. That mismatch suggests either underspecified requirements or hidden assumptions about how it will act.
!
Instruction Scope
SKILL.md is high-level and example-driven rather than step-by-step. It does not show explicit commands that will be run, but metadata suggests installing Python dependencies and the skill expects python3/curl. The instructions are vague (e.g., '监控这个商品 ...') which grants the agent broad discretion to fetch/scrape pages and decide how to act. Vague runtime instructions combined with capabilities that can require authenticated interactions is a notable risk.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md metadata includes an 'install' entry recommending 'pip3 install requests'. 'requests' is a common, benign PyPI dependency. Pulling a popular package via pip is low‑risk compared with arbitrary downloads, but you should confirm whether the agent will perform pip installs automatically at runtime.
!
Credentials
The skill declares no required environment variables or credentials. Yet features like claiming coupons, joining/assisting bargain groups, and push notifications (paid tiers) commonly need authentication tokens, cookies, or webhook endpoints. The absence of declared credentials is inconsistent with some advertised functionality and should be clarified before trusting the skill with an account.
Persistence & Privilege
The skill is not force‑always (always: false) and uses normal agent invocation settings. It does not request system config paths or elevated persistence in the provided metadata.
What to consider before installing
This skill appears to do web scraping and deal monitoring, which is plausible given its stated purpose, but several advertised features (claiming hidden coupons, bargain assistance, real‑time monitoring with push) normally require account access or persistent hooks — yet the skill declares no credentials. Before installing: 1) confirm whether the agent will ask you for Pinduoduo cookies, login tokens, or other secrets to perform coupon claiming and bargain assistance; do NOT provide full account credentials unless you trust the author and understand how they are stored. 2) Ask how and when the agent will run pip installs and whether installations occur automatically. 3) If you plan to use features that act on your account, prefer read‑only workflows (manual cookie input, limited session tokens) or test with a throwaway account. 4) Because SKILL.md is high‑level and source is 'unknown', request the actual implementation or inspect code before granting sensitive access or enabling continuous monitoring.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

💰 Clawdis
Binspython3, curl
latestvk972th9b3dhptgmv6gde3tk00s83jnc9
153downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

拼多多优惠发现技能

发现拼多多神价、监控百亿补贴、多人团优惠、砍价进度追踪。

功能

  1. 神价发现: 发现历史低价、BUG 价、限时秒杀
  2. 百亿补贴: 监控百亿补贴商品价格和库存
  3. 多人团: 发现超值多人团优惠
  4. 砍价追踪: 追踪砍价免费拿进度
  5. 优惠券: 领取隐藏优惠券
  6. 比价推荐: 对比淘宝/京东同款价格

使用方式

查看今天的拼多多神价
监控这个百亿补贴商品 https://mobile.yangkeduo.com/goods.html?goods_id=xxx
帮我找 iPhone 的多人团优惠
查询这个商品的比价信息

输出示例

💰 拼多多优惠发现

🔥 今日神价 TOP5:
1. AirPods Pro 2 代 - ¥899(百亿补贴,历史最低)
2. 小米 14 Ultra - ¥5,299(限时秒杀,省¥1,700)
3. 戴森 V15 - ¥2,999(多人团,需 5 人成团)
4. 茅台飞天 53 度 - ¥2,499(限量抢购)
5. 任天堂 Switch - ¥1,599(百亿补贴)

📊 百亿补贴监控:
├─ 商品:iPhone 15 Pro Max 256G
├─ 当前价:¥8,499
├─ 补贴价:¥7,999(补贴¥500)
├─ 库存:紧张(剩余 50+ 件)
└─ 比价:
    ├─ 淘宝:¥8,999
    ├─ 京东:¥8,999
    └─ 拼多多:¥7,999 ✅ 最低

👥 多人团优惠:
├─ 商品:戴森 V15 吸尘器
├─ 原价:¥3,999
├─ 多人团:¥2,999(省¥1,000)
├─ 成团人数:5 人
└─ 当前进度:3/5 人已成团

✂️ 砍价进度:
├─ 商品:AirPods Pro 2
├─ 目标价:¥0(免费拿)
├─ 当前价:¥199(已砍¥1,800)
├─ 剩余:¥199
└─ 预计:还需 3-5 人助力

💡 省钱建议:
1. 百亿补贴商品优先购买(正品保障)
2. 多人团找已成形团加入
3. 晚上 20-22 点神价最多

变现模式

  • 免费:每日 10 次查询
  • 付费 (¥29/月):无限查询 + 实时监控 + 推送提醒
  • 付费 (¥59/月):+ 批量监控 + 砍价助力群

声明: 价格库存实时变化,以实际页面为准。

Comments

Loading comments...