virtual-item-constructor
v1.0.0智能构造合规测试商品，支持按类目、业务身份、商品属性、商品标等条件查找或克隆商品，并自动改价和清理标签。 当用户需要构造测试商品、查找测试商品、克隆商品到测试账号、修改测试商品价格，或用户提出"帮我找一个测试商品""构造一个XX类目的商品"时使用。
⭐ 0· 20·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md describes constructing/finding/cloning test items and the included tools map directly to those actions (search, clone, change price, tag add/remove, sku lookup, knowledge-base lookup). There are no unrelated binaries, env vars, or external services required beyond internal platform endpoints.
Instruction Scope
Runtime instructions are narrowly scoped to product-test-item workflows and call only the provided scripts/tools. Each tool issues HTTP POSTs to internal Alibaba service endpoints to perform searches, clones, price changes, and tag operations — this is expected for the skill's purpose, but it means the skill will perform destructive/modifying operations on items (clone, change price, remove tags) when invoked.
Install Mechanism
There is no external install/download step; the skill is instruction/code-only and uses local Python wrapper scripts. No archive downloads or third-party package installs are present.
Credentials
The skill declares no required environment variables or credentials. The scripts attempt to read an optional 'skill-token' from SKILL.md frontmatter and, if present, will include it as an X-Skill-Token header when calling internal APIs. This is reasonable for authenticating to internal services, but users should verify any skill-token value in SKILL.md before enabling the skill.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does not modify other skills or system-wide configuration. Autonomous invocation is allowed (platform default) but is not combined with other red flags.
Assessment
This skill appears coherent: its instructions and local scripts perform the exact operations described (search, clone to test sellers, change price, remove tags) and contact internal Alibaba endpoints. Before installing, confirm: 1) you trust the skill source (it will call internal APIs that can modify items), 2) there is no sensitive 'skill-token' in SKILL.md you don't want used (scripts will add X-Skill-Token if present), and 3) you run it only against test accounts/items (it will change prices and tags). If you need higher assurance, ask the author for an audit of which accounts the clone/change/tag APIs will target and verify that calls are limited to test seller accounts.Like a lobster shell, security has layers — review code before you run it.
latestvk970jf1jrbsrc7xvxe6qphtsad84zyaz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.