VIN车辆 车型解析 API

使用积智数据 VIN 车型解析 API，通过 17 位 VIN 车架号查询车辆的车型信息：如品牌、车型、车系、年款、销售类型、发动机、变速箱等信息。

Security Scan

The skill's code, instructions, and required environment variable align with its stated purpose (querying a VIN-to-car-type API); no disproportionate permissions or suspicious install behavior were found.

Purpose & Capability

Name/description match the actual behavior: the script sends the provided VIN and JZ_API_KEY to the documented endpoint (https://erp.qipeidao.com/jzOpenClaw/getVinCarType) and returns the API response. Requested env var (JZ_API_KEY) is appropriate for this API.

Instruction Scope

SKILL.md instructs running the included Python script with a VIN and using JZ_API_KEY; the script performs only VIN validation and a single POST to the declared endpoint. Minor inconsistencies: SKILL.md says the script outputs the 'model' field but the script prints the whole JSON response; the argument-count check in main() is buggy (it checks len(sys.argv) < 1 but then reads sys.argv[1]) which may cause a runtime error but is not malicious.

Install Mechanism

No install spec (instruction-only) which minimizes risk. The Python script depends on the 'requests' library but there is no guidance to install it; this is an operational omission, not a malicious install. No downloads from untrusted URLs or archive extraction are present.

Credentials

Only a single API key (JZ_API_KEY) is required and used to call the stated external API. No other credentials, system paths, or unrelated environment variables are requested or accessed.

Persistence & Privilege

Skill does not request persistent or elevated privileges; always:false and it does not modify other skills or system configuration. It performs a single outbound API call when invoked.

Assessment

This skill appears to do exactly what it claims: call the stated VIN API using JZ_API_KEY. Before installing, ensure you trust the API provider (erp.qipeidao.com) and are comfortable supplying your JZ_API_KEY. Make sure Python and the 'requests' package are installed on your agent environment (pip install requests). Note the small bugs/inconsistencies (argument check and difference between documented vs actual printed fields); you may want to test with a non-sensitive VIN first. If you don't recognize or trust the provider, do not reuse credentials elsewhere.

积智数据 VIN 车型解析（ VIN）

基于 [VIN 车型解析 API] 的 OpenClaw 技能，支持：

• VIN 查询：通过 17 位 VIN 车架号查询车型信息：如品牌、车型、车系、年款、销售类型、发动机、变速箱等信息；

使用技能前需要申请数据，请联系【积智数据】 15821282326获取。

后端服务

本技能依赖积智数据 VIN 解析服务，接口地址：https://erp.qipeidao.com/jzOpenClaw/getVinCarType

环境变量配置

# Linux / macOS
export JZ_API_KEY="your_appkey_here"

# Windows PowerShell
$env:JZ_API_KEY="your_appkey_here"

脚本路径

脚本文件：skills/vincartype/get_vin_cartype.py

使用方式

1. 按 VIN 车架号查询车辆信息

python3 skills/vincartype/get_vin_cartype.py LSVAL41Z882104202

## VIN 车型查询请求参数

| 字段名  | 类型   | 必填 | 说明                                           |
|--------|--------|------|------------------------------------------------|
| vin    | string | 是   | 17 位 VIN 车架号                               |

示例：

LSVAL41Z882104202

## VIN 查询返回结果示例

脚本直接输出接口 `model` 字段，结构与示例一致（示例简化）：

```json
 {
    "id": 516,
    "lyId": "PAACJ00236",
    "carType": "Wrangler [牧马人]",
    "manufacturers": "克莱斯勒",
    "lyBrand": "Jeep",
    "lySubBrand": "克莱斯勒",
    "carSystem": "Wrangler [牧马人]",
    "salesName": "2.0T 手自一体 Rubicon 四门版",
    "productTime": "2019",
    "engineType": "N",
    "displacement": "2.0",
    "oilDrive": "汽油",
    "driveType": "前置四驱",
    "chassis": "JL",
    "transmissionDesc": "手自一体变速器(AT)",
    "state": 0,
    "createTime": 1710500382000,
    "updateTime": 1710500382000
  }

当出现错误（如 VIN 不正确或无数据），脚本会输出：

{
  "error": "api_error",
  "state": 202,
  "msg": "VIN不正确"
}

常见错误码

代号	说明
10001	参数错误
10004	VIN 不正确或无数据

在 OpenClaw 中的推荐用法

1. 用户给出车架号：「帮我查一下 VIN LSVAL41Z882104202 是什么车」。
2. 调用：
   python3 skills/vincartype/get_vin_cartype.py LSVAL41Z882104202
3. 从返回中选取 lyBrand/carType/carSystem/productTime/salesName/engineType/displacement/oilDrive/driveType/chassis/transmissionDesc 等字段，给出自然语言总结；