Alibaba Store Analysis — 阿里巴巴店铺分析
v1.0.0阿里巴巴店铺分析工具。
0· 59·1 当前·1 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions, network calls, and required capabilities align with its stated purpose (retrieving reports from the logged-in Alibaba web session) and it does not request unrelated credentials or install code.
评估建议
This skill appears coherent with its stated purpose: it uses your browser session to fetch report data from Alibaba and does not request extra credentials or install code. Before installing: (1) confirm you trust the skill author (homepage is missing and the README links to a GitHub user; consider reviewing that repo if available), (2) be aware the skill runs fetch calls in your browser context and will read data accessible via your logged-in session (cookies), (3) do not paste or run arbitrary ...详细分析 ▾
✓ 用途与能力
The skill's purpose (pulling Alibaba weekly report data via a browser session) matches the instructions: open i.alibaba.com, use the browser context to call Alibaba CRM endpoints, and present structured diagnostics. It does not request unrelated binaries, environment variables, or installs.
ℹ 指令范围
Instructions confine actions to the user's browser session and Alibaba CRM endpoints (diagnoseData.json and queryWeekReportAllData.json). The agent is instructed to prompt the user to log in and to fetch using credentials:'include'. This is appropriate for the task, but the skill relies on executing fetch in the browser context and on holding the retrieved full-report JSON in memory for later queries — both are functional but merit user attention because the privacy guarantee is only normative (not enforced). The instructions do not direct data to any external domains beyond Alibaba.
✓ 安装机制
Instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded. This is the lowest-risk install model.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. It operates using the user's existing browser session (cookies) which is proportional to the stated function.
✓ 持久化与权限
always is false and the skill is user-invocable. The skill does not request persistent system privileges or modifications to other skills. It will retain the report JSON in session memory to answer follow-up questions, which is expected behavior for this use case.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/10
alibaba-store-analysis 1.0.0 - Added version metadata and improved attribution in SKILL.md. - Moved external repository credit to a footer for better visibility. - No changes to functionality or workflow; documentation only.
● Pending
安装命令 点击复制
官方npx clawhub@latest install alibaba-store-analysis
镜像加速npx clawhub@latest install alibaba-store-analysis --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制