Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Taobao Price Monitor

v1.0.0

监控淘宝/天猫商品价格,支持历史价格查询、降价提醒、比价功能。适合电商卖家、代购、精明消费者。

0· 523·3 current·3 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for 275254cl-hash/taobao-price-monitor.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Taobao Price Monitor" (275254cl-hash/taobao-price-monitor) from ClawHub.
Skill page: https://clawhub.ai/275254cl-hash/taobao-price-monitor
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: TAOBAO_COOKIE
Required binaries: python3, curl
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install taobao-price-monitor

ClawHub CLI

Package manager switcher

npx clawhub@latest install taobao-price-monitor
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description claim multiple features (历史价格、降价提醒、比价、批量监控、API、导出、企业版) but the repository only includes a single query_price.py that performs basic price fetching. Several referenced tools (history_price.py, price_alert.py, compare_price.py) and an HTTP API server are mentioned in SKILL.md but are not present. This mismatch suggests the package does not implement its advertised capabilities.
!
Instruction Scope
SKILL.md directs installation of extra tooling (playwright + playwright install) and modifying ~/.openclaw/openclaw.json to store a TAOBAO_COOKIE. The shipped Python tool uses only requests; Playwright is not used in query_price.py. The instructions also describe running a local HTTP API (localhost:18789) and cron jobs, but no server code or the other scripts required for alerts/history/compare are included. These vague/overbroad instructions grant the agent discretion and ask to store a sensitive cookie in agent config.
!
Install Mechanism
Registry metadata lists no install spec, but SKILL.md contains frontmatter recommending pip install requests and the body instructs installing Playwright. The actual code requires only requests. The mismatch between metadata, instructions, and code raises the risk that additional install steps (Playwright) are unnecessary or were copied from another project.
Credentials
The skill requests a TAOBAO_COOKIE which is relevant for bypassing anti-scraping and could be required for some scraping tasks. However SKILL.md says Cookie is optional while the registry requires TAOBAO_COOKIE as mandatory—this contradiction should be resolved before providing secrets. Storing the cookie in ~/.openclaw/openclaw.json would make it available to the agent and potentially other skills.
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. The SKILL.md suggests scheduling cron jobs and storing configuration in the agent config, which is typical for monitoring skills, but nothing here requests permanent global privileges or modifies other skills' configs.
What to consider before installing
This package is internally inconsistent rather than overtly malicious: it asks for a Taobao cookie (sensitive) and documents many features that are not present in the shipped files. Before installing or providing secrets: 1) ask the author for the missing scripts (history/alert/compare/server) or a single-file explanation; 2) confirm whether Playwright is actually required — avoiding installing heavy browser libs if not needed; 3) do not paste real TAOBAO_COOKIE into shared agent config; prefer testing in an isolated environment or using a throwaway cookie; 4) if you need alerts or API endpoints, require that the skill includes the server/cron code or provide deployment instructions; 5) if you can't verify these inconsistencies, treat the skill as untrusted and avoid supplying credentials or enabling autonomous runs.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🛒 Clawdis
Binspython3, curl
EnvTAOBAO_COOKIE
latestvk972e2qn3v1469bcpm3gn5gcph83jstk
523downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

淘宝价格监控技能

监控淘宝/天猫商品价格,支持历史价格查询、降价提醒、跨平台比价。

功能

  1. 价格查询: 实时获取商品当前价格
  2. 历史价格: 查看商品历史价格走势
  3. 降价提醒: 设置目标价,降价时通知
  4. 比价功能: 同款商品跨店铺比价
  5. 批量监控: 同时监控多个商品

快速开始

1. 安装依赖

pip3 install requests playwright
playwright install

2. 配置 Cookie(可选,用于突破反爬)

~/.openclaw/openclaw.json 中添加:

{
  skills: {
    entries: {
      "taobao-price-monitor": {
        enabled: true,
        env: {
          TAOBAO_COOKIE: "your_cookie_here",
        },
      },
    },
  },
}

3. 使用方式

查询单个商品价格:

监控淘宝价格 https://item.taobao.com/item.htm?id=123456789

设置降价提醒:

当这个商品降到 100 元以下时提醒我 https://item.taobao.com/item.htm?id=123456789

批量监控:

监控以下商品的价格:
- https://item.taobao.com/item.htm?id=123
- https://item.taobao.com/item.htm?id=456
- https://item.taobao.com/item.htm?id=789

查看历史价格:

查看这个商品的历史价格走势 https://item.taobao.com/item.htm?id=123456789

比价:

帮我找同款商品的最低价 https://item.taobao.com/item.htm?id=123456789

工具说明

核心工具

工具功能调用方式
query_price.py查询商品价格自动调用
history_price.py历史价格查询自动调用
price_alert.py降价提醒设置自动调用
compare_price.py比价功能自动调用

输出格式

{
  "item_id": "123456789",
  "title": "商品标题",
  "current_price": 199.00,
  "original_price": 299.00,
  "discount": "6.7 折",
  "sales": "月销 1000+",
  "shop_name": "店铺名称",
  "shop_rating": 4.8,
  "delivery": "包邮",
  "timestamp": "2026-03-24 00:00:00"
}

注意事项

  1. 反爬限制: 高频访问可能需要 Cookie 或代理
  2. 价格准确性: 促销价格可能实时变化
  3. 地区差异: 部分商品有地区限价
  4. 使用频率: 建议单 IP 每分钟不超过 10 次请求

进阶用法

定时监控

配置 cron 任务,每小时自动检查:

{
  cron: {
    jobs: [
      {
        id: "taobao-price-check",
        schedule: { kind: "every", everyMs: 3600000 },
        payload: { 
          kind: "agentTurn", 
          message: "检查监控的淘宝商品价格,有变化时通知我" 
        },
        sessionTarget: "isolated",
      }
    ]
  }
}

导出数据

导出我监控的所有商品价格数据为 Excel

API 调用(高级)

技能支持 HTTP API 调用,适合集成到其他系统:

curl http://localhost:18789/skills/taobao-price-monitor/query \
  -d '{"item_id": "123456789"}'

变现模式

免费功能

  • 每日 10 次价格查询
  • 基础历史价格
  • 手动比价

付费功能(¥99/月)

  • 无限次查询
  • 实时降价提醒
  • 批量监控(100+ 商品)
  • 数据导出
  • API 访问

企业版(¥5000/年)

  • 私有部署
  • 自定义监控规则
  • 数据 API
  • 专属支持

常见问题

Q: 为什么有些商品价格获取失败? A: 可能是反爬限制,尝试配置 Cookie 或使用代理。

Q: 历史价格数据准确吗? A: 基于公开数据抓取,仅供参考,以实际下单为准。

Q: 可以监控拼多多/京东吗? A: 请安装对应的 pinduoduo-price-monitorjd-price-monitor 技能。

更新日志

  • v0.1.0 (2026-03-24): 初始版本,基础价格查询

支持


声明: 本技能仅供学习研究使用,请遵守淘宝/天猫平台规则。

Comments

Loading comments...