price-monitor
v1.0.0实时监控商品和服务价格，提供价格变动提醒、历史价格分析及多平台价格对比和最佳购买建议。
⭐ 0· 578·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the SKILL.md functionality (monitor prices, alerts, history, multi-platform comparison). The skill requests no environment credentials or binaries that would be unrelated to price monitoring.
Instruction Scope
SKILL.md is high-level and describes expected inputs/outputs and example monitor configuration. It does not instruct reading local files or environment variables, nor does it name specific APIs or endpoints — this is expected for an instruction-only skill, but it leaves implementation details (how prices are fetched, which endpoints are used, retry/rate-limit behavior) to the agent, giving the agent broad discretion to perform web requests or scraping.
Install Mechanism
No install spec and no code files are present. That is the lowest-risk installation model; nothing will be written to disk by the skill package itself.
Credentials
The skill declares no required environment variables or credentials, which is proportionate for a public-web-scraping approach. Be aware some marketplaces (JD, Taobao, PDD) offer APIs that may require keys; the SKILL.md does not request or mention such keys.
Persistence & Privilege
always is false and there are no requested config paths. The skill does not request persistent system presence or elevated privileges.
Assessment
This skill appears coherent and low-risk as packaged: it is instruction-only, asks for no credentials, and aligns with its stated purpose. Before installing, consider: (1) how the agent will fetch prices — it will likely make outbound web requests or perform scraping; ensure you are comfortable with that network activity and any legal/rate-limit issues for target sites; (2) whether you will supply API keys for specific marketplaces (the skill does not request them now); only provide credentials if you trust the skill and know why they are needed; (3) privacy of any shopping history or personal data you might ask it to monitor — the skill could transmit such information if the agent implementation chooses to; (4) monitor alert behavior (frequency, volume) to avoid noisy/undesired notifications. Overall benign and coherent, but the SKILL.md is intentionally vague about data sources and fetch behavior — ask the author or review runtime logs if you need stricter guarantees about where data is fetched and how often.Like a lobster shell, security has layers — review code before you run it.
chinesevk97e4kvhnxaeeg66s94pyb640982ptedlatestvk97e4kvhnxaeeg66s94pyb640982pted
License
MIT-0
Free to use, modify, and redistribute. No attribution required.