Price Alert Monitor

商品价格监控工具。监控电商商品价格变化，价格低于阈值时发送通知。适合购物党、羊毛党。

Security Scan

The skill's description promises real price monitoring and notification delivery, but the shipped code only simulates prices and does not implement email/webhook notifications despite the README mentioning them — several mismatches suggest the package is incomplete or misleading.

Purpose & Capability

Name and description (price monitoring + alerts) match the provided script's intent. The script detects platforms, stores items, and updates a local JSON price history which is coherent with a simple price monitor. Minor inconsistency: _meta.json declares python3 as a required binary while higher-level metadata listed no required binaries.

Instruction Scope

SKILL.md claims support for SMTP and Webhook notifications and instructs users to set PRICE_WEBHOOK, but the actual script does not read any environment variables, does not call network endpoints, and does not implement SMTP/webhook delivery. Also SKILL.md implies real price retrieval from e-commerce sites, while fetch_price in the script returns simulated random prices. This is scope creep / mismatch between instructions and runtime behavior.

Install Mechanism

No install spec (instruction-only) and only a small Python script are provided; there is no remote download or package installation. The risk from installation is low. _meta.json indicates python3 is required (reasonable).

Credentials

SKILL.md suggests configuring PRICE_WEBHOOK and SMTP credentials for notifications, but the code does not read or require any environment variables or credentials. There are no required secrets declared. The documentation hinting at external endpoints/credentials without code support is inconsistent and could mislead users into providing secrets where the code won't use them — or suggests missing functionality that, if added later, could require those credentials.

Persistence & Privilege

The script stores data at ~/.price-monitor.json (user home) which is typical for a per-user tool. The skill does not request always:true, does not modify other skills, and does not access system-wide configs.

What to consider before installing

This package is not malicious but is inconsistent: the README promises real price scraping and notification delivery (SMTP/Webhook) but the bundled script only generates simulated prices and prints to the terminal while saving data to ~/.price-monitor.json. Before installing or running it: (1) inspect the Python script yourself — it currently contains no network calls or notification code, so it won't send alerts; (2) if you expect webhook/email alerts, implement or verify secure handling of credentials and endpoints (the README's PRICE_WEBHOOK suggestion is not used by the script); (3) be aware it will create/modify ~/.price-monitor.json; (4) if you don't want to run it on your host, run inside a sandbox/container; (5) contact the author or wait for a version that implements real fetching and secure notification if you need production behavior.

监控商品价格变化，发现底价时通知你！

功能

• 🛒 支持监控京东、淘宝、亚马逊等商品
• 📉 记录价格历史，生成走势
• 🔔 价格低于阈值时通知
• 📊 支持多商品同时监控

使用方法

添加商品监控

python3 scripts/price_monitor.py add "商品URL"

查看监控列表

python3 scripts/price_monitor.py list

检查价格

python3 scripts/price_monitor.py check

设置价格提醒

python3 scripts/price_monitor.py alert "商品ID" 100

示例

# 监控京东商品
python3 scripts/price_monitor.py add "https://item.jd.com/100086924064.html"

# 监控亚马逊商品
python3 scripts/price_monitor.py add "https://www.amazon.com/dp/B09V3KXJPB"

# 设置低于 100 元提醒
python3 scripts/price_monitor.py alert 1 100

# 检查所有商品价格
python3 scripts/price_monitor.py check

通知设置

需要配置通知方式，支持：

• 打印到终端
• 发送邮件（需要配置 SMTP）
• 发送到 Webhook

export PRICE_WEBHOOK="your-webhook-url"