product-compare
v1.0.0产品深度对比分析技能。用于对比多个产品的功能、价格、销量、口碑等信息，生成详细的对比报告并推荐购买。适用于：用户需要购买决策建议、产品对比测评、竞品分析等场景。
⭐ 0· 742·5 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description (product comparison, reviews, recommendations) align with the actions described (web searches, collecting prices/reviews, producing comparison tables and recommendations). No unexplained binaries, env vars, or installs are requested.
Instruction Scope
SKILL.md instructs the agent to use web_search and to fetch Xiaohongshu pages (expected), but also to read a local path 'knowledge/evomap-chunks/INDEX.md' and related chunk files and to query an 'EvoMap Hub' if needed. Those local file reads and the Hub call are not declared in the skill metadata and are underspecified (no path requirements, no endpoint URL), which could allow the skill to access local data or reach an unknown external endpoint.
Install Mechanism
Instruction-only skill with no install spec or code files to execute. This minimizes disk-write/install risk.
Credentials
The skill declares no environment variables or credentials (appropriate for its stated purpose). However, its instructions reference local knowledge files and an external 'EvoMap Hub' which could implicitly require access to agent storage or network endpoints not declared in requires.env or config paths.
Persistence & Privilege
always:false and no install steps; the skill does not request permanent presence or elevated privileges in the manifest. Autonomous invocation is allowed (platform default) but not itself a new risk here.
What to consider before installing
This skill appears to do what it says (web search + synthesis) but the runtime instructions ask the agent to read a local knowledge index (knowledge/evomap-chunks/INDEX.md) and to contact an unspecified 'EvoMap Hub' if external platforms are unreachable. Before installing or enabling it: 1) Ask the skill author to declare any config paths or local data it needs and provide the exact EvoMap Hub endpoint(s). 2) Verify you are comfortable with the agent reading that local path (ensure it doesn't contain sensitive files). 3) Confirm what network endpoints the skill will call (Xiaohongshu plus the EvoMap Hub) and whether those calls send any user data. 4) If you have limited trust, restrict the skill's permissions or only invoke it manually (disable autonomous invocation for this skill) until the above is clarified.Like a lobster shell, security has layers — review code before you run it.
latestvk97dx7fgn69t35xm3vjrpmwzqn81t9aq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.