Vipshop
v0.1.0提供唯品会公开商品及活动页的价格、评价和规格摘要，支持关键词搜索和同类商品对比分析。
⭐ 0· 108·0 current·0 all-time
byClawKK@codekungfu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description and SKILL.md all describe the same function (scraping/summary of public vip.com product and activity pages). The skill declares no binaries, env vars, or installs — consistent with a lightweight information-extraction helper.
Instruction Scope
SKILL.md stays within scope: it targets only public product/activity pages, lists the data fields to extract, explicitly forbids ordering, API reverse-engineering, and bulk collection, and recommends manual page opening and rate-limiting to avoid anti-bot measures. It does not instruct reading local files, unrelated env vars, or transmitting data to unexpected endpoints.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes on-disk execution risk and aligns with the stated lightweight analysis purpose.
Credentials
No environment variables, credentials, or config paths are requested. The lack of secrets or unrelated credentials is proportionate to the described functionality.
Persistence & Privilege
always:false and no special privileges requested. The skill is user-invocable and can be called autonomously by the agent (platform default) — that autonomy is normal and not, by itself, a red flag.
Assessment
This skill appears coherent and low-risk in isolation because it is instruction-only and asks for no credentials or installs. Before enabling: (1) confirm you're comfortable with the agent having web access — the skill's tasks involve fetching public pages and could be automated by the agent; (2) monitor usage to ensure the agent respects the SKILL.md guidance (no bulk scraping, obey rate limits), because those are policy-level constraints the skill cannot enforce itself; (3) check vip.com terms of use to ensure the planned use is allowed; and (4) revoke or disable the skill if you see unexpected network activity or attempts to access credentials or local files.Like a lobster shell, security has layers — review code before you run it.
latestvk971kfsw0jhr07sfj3kd3pjb2n832wve
License
MIT-0
Free to use, modify, and redistribute. No attribution required.