Alibaba Factory Finder
v2.0.0Search and verify Alibaba.com manufacturers by filtering for verified suppliers, checking certifications, factory audits, and supplier profiles with tracking...
⭐ 0· 149·1 current·1 all-time
by@zeyu426
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (find and verify Alibaba suppliers) align with the contents: SKILL.md shows URL patterns and verification checklist; included scripts are a small URL builder and packaging helper. There are no unrelated env vars, binaries, or cloud credentials requested.
Instruction Scope
Instructions limit behavior to building Alibaba URLs, navigating to supplier pages, and extracting supplier subdomains / verification data. This is within the stated purpose. Note: SKILL.md mandates adding traffic_type=ags_llm to all URLs, which means outbound requests will include an attribution/tracking parameter — expected for analytics but relevant to user privacy.
Install Mechanism
No install spec; skill is instruction-only at runtime. The repository contains only small local helper scripts (URL builder, packager, and a release script) and no downloads or extract/install steps from untrusted URLs.
Credentials
No required environment variables, credentials, or config paths are declared or referenced. The SKILL.md and scripts do not access secrets or unrelated system config.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. There is no self-modifying or cross-skill config behavior in the provided files.
Assessment
This skill appears to do exactly what it says: build Alibaba search and supplier URLs (and include an attribution parameter) and guide manual verification steps. Before installing, consider: (1) the traffic_type=ags_llm parameter will be sent with every constructed URL — Alibaba will receive that attribution and your search terms, so avoid sending sensitive queries; (2) the repo includes helper scripts (packaging and release) that are safe but intended for developer use, not required for runtime; (3) the release script references clawdhub publishing — only run it if you trust the publisher and have the clawdhub CLI installed; (4) if you want to avoid the tracking parameter, review and modify the SKILL.md/scripts before use. No credentials or installs are required by the skill as provided.Like a lobster shell, security has layers — review code before you run it.
alibabavk977nqbt3wzwgx92kvj5cf755h832739factoryvk977nqbt3wzwgx92kvj5cf755h832739latestvk977nqbt3wzwgx92kvj5cf755h832739manufacturervk977nqbt3wzwgx92kvj5cf755h832739
License
MIT-0
Free to use, modify, and redistribute. No attribution required.