Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Taobao Draft Generator

v1.0.0

淘宝商品上架草稿生成 - 人工触发,五维材质一致性校验,SEO 标题二次原创,仅生成草稿不自动上架

0· 100·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for guowaa223/taobao-draft-generator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Taobao Draft Generator" (guowaa223/taobao-draft-generator) from ClawHub.
Skill page: https://clawhub.ai/guowaa223/taobao-draft-generator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install taobao-draft-generator

ClawHub CLI

Package manager switcher

npx clawhub@latest install taobao-draft-generator
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description promise: generate Taobao listing drafts with five‑dimensional consistency checks and only official API use. Actual code: reads local ./products/[款号]/product_info.json, produces a JSON draft and a simple Excel audit report (stubbed results). There are no API calls to Taobao and the detailed compliance checks are not implemented — the implementation is a simplified local draft generator, so some claimed capabilities are overstated.
!
Instruction Scope
SKILL.md/README describe multiple compliance checks (违禁词检测, 类目检查, 五维一致性) and 'official API' operations. The runtime script only reads local files, writes files, and writes an Excel report with placeholder '✅ 通过' entries; it does not perform the promised validation nor any network/API calls. That discrepancy is scope creep / misrepresentation and could mislead users into trusting checks that aren't performed.
Install Mechanism
No install spec provided (instruction-only with bundled code). Dependencies are listed in requirements.txt for pip; installation is standard and low-risk. No remote downloads or archive extraction occur. This is low install risk.
Credentials
The skill declares no required environment variables, which matches the manifest; however the script calls dotenv.load_dotenv() and reads LOG_LEVEL via os.getenv. Loading a .env file can surface environment secrets if present. The code does not send network requests, but users should be aware the runtime will read environment variables if a .env file exists.
Persistence & Privilege
The skill is not always-enabled and does not request elevated privileges or write to other skills' configs. It creates local dirs (logs, drafts, product audit folders) within the workspace, which is expected for a local generator.
What to consider before installing
This skill appears to be a simple local draft generator, but it overstates its capabilities. Before installing or running: 1) do not assume the compliance checks are performed — the audit is a stub; review and implement real checks if you need them; 2) inspect and run the Python code in a sandbox — there is a syntax bug in main() (a non-ASCII comma) that will cause failure; fix/test locally first; 3) remove or inspect any .env before running since the script loads environment variables; 4) if you expect Taobao API integration or automated validation, demand or implement visible API calls and proper checks; otherwise treat this as a helpful draft template generator, not a compliance/automation tool.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📝 Clawdis
OSWindows
Binspython3
latestvk977nbr6hmnafn3htbn81g59h583wxms
100downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0
Windows

淘宝商品上架草稿生成 Skill

⚠️ 重要安全声明

本技能严格遵守以下安全铁律:

  1. 不自动上架 - 仅生成草稿和终审表,必须人工审核后手动发布
  2. 五维材质一致性 - 标题、属性栏、详情页、吊牌、质检报告 100% 一致
  3. 官方 API 操作 - 仅通过淘宝官方 API,禁止模拟点击、无头浏览器
  4. 人工触发 - 必须人工确认素材编辑完成后触发

功能概述

能力映射(仅人工触发)

用户输入:款号 + 确认素材已完成(人工提供)
    ↓
Step 1: 商品合规信息提取
    ↓
Step 2: SEO 标题二次原创(100% 原创,禁违禁词)
    ↓
Step 3: 类目属性合规填充
    ↓
Step 4: 五维材质一致性校验(不一致直接拦截)
    ↓
Step 5: 素材精准匹配上传(按命名顺序)
    ↓
Step 6: 价格库存合规设置(≥3 折,安全阈值)
    ↓
Step 7: 上架前合规终审(双重违禁词校验)
    ↓
输出:淘宝商品上架草稿 + 《上架信息终审表》

强制合规规则(硬限制)

1. 标题 100% 二次原创

  • ✅ 禁止搬运网商园原标题
  • ✅ 符合男装 SEO 规则
  • ✅ 规避违禁词、极限词

2. 五维材质一致性校验

维度校验对象一致性要求
1标题材质描述100% 一致
2属性栏材质100% 一致
3详情页材质说明100% 一致
4吊牌材质100% 一致
5质检报告材质100% 一致

3. 价格库存合规

  • ✅ 折扣不低于一口价的 3 折
  • ✅ 禁止 1 元以下引流 SKU
  • ✅ 库存安全阈值:≥10 件

使用命令

python scripts/draft_generator.py generate --款号 KZ20260326 --确认素材已完成

输出物

1. 淘宝商品上架草稿(JSON)

2. 《上架信息终审表》(Excel)

包含:全量信息、五维一致性校验结果、违禁词检测、类目正确性、属性完整性、风险点标注


安全与合规声明

本技能不会:

  • ❌ 自动执行商品上架发布
  • ❌ 搬运网商园原标题
  • ❌ 修改材质描述
  • ❌ 模拟点击、无头浏览器操作

本技能仅支持:

  • ✅ 生成上架草稿
  • ✅ 生成终审表
  • ✅ 人工审核后手动发布
  • ✅ 官方 API 操作

📝 淘宝商品上架草稿生成 — 人工审核,合规第一

Comments

Loading comments...