ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Price Hunter

v1.0.0

Global price comparison tool with international platform support. Compare prices across Amazon, eBay, AliExpress, Temu (international) AND JD, Taobao, Tmall,...

⭐ 3· 976·7 current·7 all-time
byMichael@sunkinux
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description claim cross-platform price comparison; SKILL.md instructs web search and page fetching to extract prices, sellers, ratings, shipping, and links — all coherent and expected for this purpose. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
Instructions are focused on searching and extracting price data from public pages and search results. They explicitly handle platform-specific limitations (e.g., Pinduoduo link restrictions, Taobao/Tmall login walls). Note: following pages that require login or verifying link accessibility may fail or return partial data; the instructions do not ask for any local file or secret access.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest risk install surface. Nothing is written to disk by the skill itself.
✓
Credentials
No environment variables, credentials, or config paths are requested. The required external access (web searches and fetches) matches the stated functionality.
✓
Persistence & Privilege
Does not request always: true or any elevated persistent privileges. Default autonomous invocation is allowed by platform but is not excessive for this type of skill.
Assessment
This skill is internally consistent, but be aware of practical and policy considerations before installing: it scrapes public product pages and search results — this can trigger anti-scraping blocks, return incomplete data for pages behind login, or run afoul of some sites' terms of service. The skill does not request credentials, but it will make many outgoing requests (the agent's network/IP will be used). If you need reliable or high-volume data, prefer official APIs from merchants or aggregator partners and consider rate limits, localization (currency, region, language), and verifying final prices before purchasing. If you want to restrict network access or audit requests, do that at the agent/platform level. If anything in the SKILL.md seems unclear (for example how it handles paginated results, currency rounding, or shipping estimate sources), ask the author for clarification before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e3a9ysx3b4p2xrgg2assc71824wky

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments