Alibaba Product Hunt
v2.0.0Discover trending, best-selling, and newly listed products on Alibaba.com to analyze market trends and identify hot-selling items by category.
⭐ 0· 132·0 current·0 all-time
by@zeyu426
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (discover trending / hot-selling products on Alibaba) match the included SKILL.md and the helper scripts. The build_url.py constructs Alibaba search URLs with the required tracking parameter. The repo contains packaging/publish helper scripts (release.sh, package_skill.py) which are appropriate for development/publishing but not required at runtime. Minor note: release.sh hardcodes a VERSION=1.0.0 while registry metadata shows 2.0.0; this is an editorial mismatch, not a security problem.
Instruction Scope
SKILL.md instructs only to visit Alibaba listing pages, include the traffic_type=ags_llm parameter, extract product links, and analyze listing details. It does not instruct reading local files, accessing unrelated environment variables, or sending data to third-party endpoints beyond Alibaba pages. The tracking parameter is explicit; there are no instructions that imply data exfiltration of local secrets.
Install Mechanism
No install spec is present (instruction-only at runtime). Included scripts are simple local Python utilities (URL-builder and packaging) and a small bash release script that calls a CLI (clawdhub). There are no downloads from arbitrary URLs, no extracted archives, and no foreign package installs declared.
Credentials
Skill declares no required environment variables, no credentials, and no config paths. The runtime instructions do not reference hidden env vars or secrets. The traffic_type tracking parameter is the only external identifier used.
Persistence & Privilege
Skill is not always-enabled and does not request elevated persistence. It does not attempt to modify other skills or global agent settings in the files provided. The included publish script is for the maintainer's workflow and not a runtime privilege escalation.
Assessment
This skill appears to be what it says: a small helper for building Alibaba search URLs and guiding browsing of Top Ranking / New Arrivals / Hot-Selling pages. Before installing: (1) be aware the SKILL will direct the agent to fetch content from Alibaba (which may hit site rate limits or violate site terms if abused); (2) the skill appends a tracking parameter (traffic_type=ags_llm) to URLs for attribution — if you object to that, remove or change it; (3) the included release/publish scripts are development tools and will call the clawdhub CLI if executed — they do not run automatically; (4) if you want to limit autonomous web access, prefer using the skill only when explicitly invoked or restrict the agent's web-browsing capability. No credentials or remote installers are required. If you want more assurance, inspect the code yourself or run it in a restricted environment first.Like a lobster shell, security has layers — review code before you run it.
alibabavk97ezzr0sf56tpyct7vdk6kbp5833nqxlatestvk97ezzr0sf56tpyct7vdk6kbp5833nqxproduct-discoveryvk97ezzr0sf56tpyct7vdk6kbp5833nqxtrendingvk97ezzr0sf56tpyct7vdk6kbp5833nqx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.