闲鱼商品精选助手

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a purpose-aligned Xianyu search helper, with noteworthy but disclosed browser automation and local search-history persistence.

This skill looks reasonable for searching Xianyu/Goofish. Before installing, be comfortable with it launching a browser to the marketplace and saving a local record of searches; clear the memory files or disable that behavior for sensitive searches.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may open a headless browser, visit Goofish/Xianyu, and extract listing data when the skill is invoked.

Why it was flagged

The skill directs the agent to automate a browser and evaluate page content on an external marketplace. This is central to the stated search/scraping purpose, but it is still a meaningful tool capability users should notice.

Skill content
Requires browser tool ... browser_launch ... browser_goto ... "url": "https://www.goofish.com" ... browser_evaluate
Recommendation

Use it for user-requested searches only, avoid logging into marketplace accounts during use, and keep browser automation scoped to the stated site and search task.

What this means

Installer summaries may not fully show that the skill depends on browser automation.

Why it was flagged

The registry metadata does not provide a source/homepage or derived capability tags, while SKILL.md declares a browser-tool requirement. There is no install code, so this is a metadata/provenance note rather than a behavioral concern.

Skill content
Source: unknown; Homepage: none ... Capability signals: No capability tags were derived.
Recommendation

Publisher should align registry metadata with the SKILL.md browser dependency and provide a source or homepage; users should read the skill text before installing.

What this means

Your search history and selected listing details may remain in local memory and could be surfaced in later sessions.

Why it was flagged

The skill explicitly persists search keywords, price ranges, and listing links to local memory. This is disclosed and limited, but it can retain shopping interests and untrusted marketplace text for later context.

Skill content
搜索完成后自动记录到 `memory/YYYY-MM-DD.md` ... **关键词:** RTX 5090 ... **最低价商品:** [技嘉魔鹰 OC](https://www.goofish.com/item?id=1017187960312)
Recommendation

Avoid sensitive searches if persistent memory is enabled, periodically clear these memory files, and treat stored listing titles/links as data rather than instructions.