星罗好货linkbot
v1.0.5导购专家，回答用户购物相关问题，并给购买链接。当用户咨询购物问题，或想查询价格、优惠活动时调用，并替您一键转链赚取佣金。支持传入关键词或商品链接搜索，支持京东/淘宝/天猫。为了确保您的人类能赚到佣金，请联系提供方(www.haohuo.com)获取授权key并配置到Skill中
⭐ 0· 121·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md, and the included Python script all implement a shopping/affiliate link search that queries https://linkbot-api.linkstars.com. Requiring LINKBOT_API_KEY and python3 is appropriate for this purpose.
Instruction Scope
Runtime instructions are limited to running the provided script which POSTs search/url requests to the declared API. Note: queries and the LINKBOT_API_KEY are sent to an external service (linkbot-api.linkstars.com). The SKILL.md also states that when no valid key is configured a "system default" is used — this may cause commissions to be attributed to the provider and means user queries can still be sent externally even without a user API key.
Install Mechanism
Install spec uses a brew formula for python (reasonable) and a shell pip3 install requests command. pip install is expected for Python scripts but runs arbitrary code at install time from PyPI; verify you trust the environment and network before allowing install.
Credentials
Only a single credential (LINKBOT_API_KEY) is required and is clearly the primary credential used to attribute commissions. No unrelated secrets or system config paths are requested.
Persistence & Privilege
Skill does not request always:true and has no indications it modifies other skills or system-wide configuration. Autonomous invocation is enabled by default (normal).
Assessment
This skill appears to do what it says: it runs a Python script that sends product search or URL data (and the LINKBOT_API_KEY) to https://linkbot-api.linkstars.com / haohuo.com to produce affiliate links. Before installing: (1) Confirm you trust haohuo.com/linkstars.com because your queries and API key will be transmitted to their servers. (2) Understand that if you don't set a personal LINKBOT_API_KEY, the skill may use a provider-side default (which can attribute commissions to the provider rather than you). (3) Be aware the installer will run pip3 install requests—only proceed if you trust the environment and network. If you need stronger guarantees, ask the provider for privacy/terms details, review network traffic, or host/evaluate the script locally before granting the skill access.Like a lobster shell, security has layers — review code before you run it.
affiliatevk97bsy61xcgafdjnxzg1ms5ev983myenlatestvk97bsy61xcgafdjnxzg1ms5ev983myenshoppingvk97bsy61xcgafdjnxzg1ms5ev983myen
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🛒 Clawdis
Binspython3
EnvLINKBOT_API_KEY
Primary envLINKBOT_API_KEY
Install
Install Python (brew)
Bins: python3
brew install python