v1.0.0

闲鱼商品精选助手

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 6:32 AM.

Analysis

This skill is a coherent Xianyu shopping-search helper; it uses browser searches and keeps a small search history, both of which are disclosed and aligned with its purpose.

GuidanceThis appears safe for its intended purpose: searching Xianyu/Goofish listings and filtering results. Before installing, be aware that search terms are sent to the marketplace website and that the skill says it saves search history in memory; clear or disable that record if the items you search for are private.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

SKILL.md

browser(action=navigate, url="https://www.goofish.com/search?q=[关键词]")

The skill instructs the agent to use browser automation to send the user's search keyword to Goofish/Xianyu and interact with the results page.

User impactYour product search terms will be sent to Goofish/Xianyu, and the agent may click page filters to collect listing information.

RecommendationUse it for intended shopping searches only, and review results yourself before contacting sellers or buying anything.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Memory and Context Poisoning

SeverityLowConfidenceHighStatusNote

SKILL.md

搜索完成后，记录到 `memory/YYYY-MM-DD.md`：... **关键词：** ... **最低价商品：** [链接](https://www.goofish.com/item?id=...)

The skill says it will persist search records, including search keywords and product links, in a memory file.

User impactYour shopping interests and searched items may remain in local or agent memory after the search.

RecommendationIf the searches are sensitive, disable or clear the memory records, or avoid using personal/private keywords.