ShopMind Price Compare

全网比价助手，支持淘宝/天猫、京东、拼多多、抖音、快手、苏宁、唯品会、考拉、1688 十大平台实时比价。含优惠券筛选、热门爆品、省钱计算、购买链接。用户想购物、比价、找优惠券、看热销榜时使用。

Security Scan

The skill's code, runtime instructions, and requested resources are consistent with a price-comparison helper that queries maishou88.com; nothing indicates hidden unrelated behavior, though there are modest implementation/packaging concerns to review before installing.

Purpose & Capability

Name/description (price comparison across Chinese e‑commerce platforms) match the code and runtime commands. The script issues HTTP requests to maishou88.com APIs and returns product/search/result details — consistent with the stated purpose. The declared required binary ('uv') matches the SKILL.md usage 'uv run scripts/main.py'.

Instruction Scope

SKILL.md instructs running the bundled script with 'uv' and the script itself only performs HTTP requests to third‑party maishou88 endpoints and formats results; it does not read/write local files (aside from reading an optional env var). There is no instruction to access unrelated system files or exfiltrate arbitrary data. The script does include affiliate/invite behavior (INVITE_CODE) which is within the expected scope for shopping helpers.

Install Mechanism

Install options are brew and pip for a package named 'uv'. Brew/pip are reasonable install mechanisms, but the package name 'uv' is uncommon/ambiguous: verify that the 'uv' formula/package being installed is the intended, trusted runner. The SKILL.md metadata lists both brew and pip installs while registry metadata shows brew — a minor mismatch to check. No arbitrary URL downloads or archive extraction observed.

Credentials

The skill does not require credentials or config paths. The only environment use in code is an optional MAISHOU_INVITE_CODE (used for invite/affiliate tracking) — not required for functionality. No other secrets or unrelated environment variables are accessed.

Persistence & Privilege

Skill is not marked always:true and does not request persistent/system-wide changes. It does not modify other skills' configs or request elevated privileges. The default ability for the agent to invoke the skill autonomously is unchanged (not flagged by itself).

Assessment

This skill appears to do what it says: it sends search/ID queries to maishou88.com and returns formatted product and coupon info. Before installing: 1) Verify the origin of the 'uv' package/formula (brew/pip) to avoid installing a similarly named but malicious package. 2) Be aware queries (search keywords, product IDs) and results are sent to/received from maishou88.com and msapi.maishou88.com — do not send privacy-sensitive text you don't want transmitted. 3) The script includes an optional invite/affiliate code via MAISHOU_INVITE_CODE; if you don't want affiliate tracking, leave that env var unset or inspect/modify the code. 4) If you need stronger isolation, install/run the skill in a sandbox or review the full script (the distributed script is present in the package) before use. If you want, I can fetch and show the full (truncated) remainder of the script for manual review or check the 'uv' package on brew/pypi for provenance.

ShopMind 全网比价 v2.1.0

十大电��平台实时比价，开箱即用，无需部署后端。

支持平台

0:全部 1:淘宝/天猫 2:京东 3:拼多多 4:苏宁 5:唯品会 6:考拉 7:抖音 8:快手 10:1688

搜索比价

uv run scripts/main.py search --keyword='{keyword}'
uv run scripts/main.py search --keyword='{keyword}' --source=2
uv run scripts/main.py search --keyword='{keyword}' --sort=sales
uv run scripts/main.py search --keyword='{keyword}' --coupon=1
uv run scripts/main.py search --keyword='{keyword}' --min_price=50 --max_price=200
uv run scripts/main.py search --keyword='{keyword}' --page=2

排序选项 (--sort): price(价格↑) | price_desc(价格↓) | sales(销量) | discount(折扣) | commission(佣金)

商品详情+购买链接

uv run scripts/main.py detail --source={source} --id={goodsId}

返回：商品标题、价格、券后价、省钱金额、购买链接、淘口令

优惠券精选

uv run scripts/main.py coupons --keyword='{keyword}'
uv run scripts/main.py coupons --keyword='{keyword}' --source=1

热门爆品

uv run scripts/main.py hot
uv run scripts/main.py hot --source=2

关于脚本

本技能脚本不读写本地文件，仅请求第三方 maishou88.com 获取商品和价格数据。