china市场政策查询Skill

基于惠迈智能体三层架构的政策查询框架，提供中国市场政策、法规、投资环境的智能查询和分析。支持中文、英文等多种语言。

Security Scan

The skill's code, instructions, and resource requests are consistent with a local policy-query helper that returns simulated data and optionally accepts user-provided data-source API keys; nothing in the package indicates hidden exfiltration or unexpected privileges.

Purpose & Capability

The name/description (China market policy queries) match the included code and README: index.js implements policy-query and analysis methods and README/SKILL.md describe configuring data sources. The package advertises DeepSeek/Huimai integrations in metadata but contains no dependencies or integration code — a marketing mismatch but not a security mismatch.

Instruction Scope

SKILL.md and README provide usage examples, configuration guidance, and security tips. The runtime instructions do not direct the agent to read unrelated files, exfiltrate data, or contact unknown endpoints. The agent is instructed to use environment variables for API keys if the user supplies them, which is appropriate.

Install Mechanism

There is no install spec that downloads arbitrary artifacts; the package is a normal npm-style module with no dependencies. No external URL downloads or extract operations are present. Installing via npm or ClawHub is consistent with the package contents.

Credentials

The skill declares no required env vars, but the README/SKILL.md recommend using environment variables for optional data-source API keys. This is proportionate to the skill's purpose. Note: metadata advertises DeepSeek/huimai compatibility though there are no actual dependency entries — this is a documentation/marketing inconsistency, not direct credential misuse.

Persistence & Privilege

The skill does not request persistent presence (always:false), does not modify other skills or system-wide settings, and uses only in-process memory (cache is local). It does not request access to system config paths or credentials.

Assessment

This package appears to be a local, simulated policy-query helper and is internally consistent with its description. Before installing: (1) verify the package source/author since 'homepage' is missing and owner id in registry is unknown; (2) if you supply real API keys or data-source endpoints in config/environment variables, only use trusted data providers and grant minimal permissions; (3) note that the README/metadata mention DeepSeek and Huimai integrations but the package has no dependencies for those — treat those as marketing claims and confirm any external integrations yourself; (4) you can safely inspect or run the small index.js/test.js locally or in a sandbox to confirm behavior before granting it access to production secrets or systems.

中国市场政策查询Skill

🚀 概述

基于惠迈智能体三层架构的政策查询框架，提供中国市场政策、法规、投资环境的智能查询和分析。

🌟 核心亮点

• 惠迈智能体协作：基于惠迈三层智能体架构，支持多源数据整合
• 惠迈智能体协作：基于惠迈三层智能体架构，确保数据准确性和实时性
• 多语言支持：支持中文、英文等多种语言
• 数据源可配置：灵活配置不同数据源，适应各种业务需求

🔧 技术特性

多语言支持

• 中文（简体）
• 英文（美国）
• 自动语言检测和切换

数据源配置

{
  dataSources: {
    investment: '[请替换为您的中国投资政策数据源]',
    trade: '[请替换为您的中国贸易法规数据源]',
    // ... 其他数据源
  }
}

📦 安装

# 通过ClawHub安装
clawhub install china-policy-query

# 或手动安装
npm install china-policy-query

🔒 安全使用指南

1. 数据源配置：使用环境变量管理敏感数据源信息
2. API密钥：不要将真实API密钥写入代码
3. 权限控制：为数据源配置最小必要权限

支持

如有问题，请提交Issue或联系维护团队。

---

惠迈智能体：让全球业务变得简单