🛒 agent-shopping — AI购物助手
v0.1.0基于Agent的智能购物助手，自动比价、推荐商品并跟踪价格，让网购更高效省钱。
0· 113·0 当前·0 累计
by @hanxueyuan下载技能包
最后更新
2026/3/31
安全扫描
OpenClaw
可疑
medium confidenceThe skill is generally consistent with a shopping assistant, but its instructions are vague about required API credentials and future autonomous purchasing behavior—there's a mismatch between the README and the declared requirements that merits caution.
评估建议
This skill is an instruction-only shopping assistant and currently has no declared required credentials, but its docs ask you to set API keys and its roadmap mentions autonomous purchasing. Before installing or using it: (1) ask the author for a precise list of required environment variables and exactly how they are used; (2) do not provide payment credentials or long-lived platform tokens until you verify the integration and scope; (3) require explicit confirmation from the agent/user before an...详细分析 ▾
ℹ 用途与能力
Name and description match a shopping assistant; the SKILL.md describes product search, comparison, and eventual purchasing which aligns with the stated purpose. However the roadmap includes autonomous purchasing (v1.0) which raises expectations that credentials/payment methods will be required later even though none are declared now.
ℹ 指令范围
The runtime instructions are high-level and limited to parsing user intent and returning product recommendations/buy links. They do not instruct reading local files or secrets. However the doc instructs the operator to 'Set up API credentials in environment variables as needed for each supported platform' — this is vague and gives the agent open-ended authority to use unspecified credentials when integrating platform APIs.
✓ 安装机制
Instruction-only skill with no install spec and no code files; nothing is written to disk by the skill bundle itself, which is the lowest install risk.
⚠ 凭证需求
The registry lists no required environment variables, but the SKILL.md tells users to set API credentials in env vars as needed. That mismatch is concerning because it leaves unspecified which credentials the agent may later request (payment services, retailer APIs, account tokens). Requiring unspecified secrets is disproportionate without clearer justification.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. Autonomous invocation is allowed (platform default) but there are no indications the skill changes other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/31
Initial release of agent-shopping: an agent-powered smart shopping assistant. - Search for products, compare prices, and give purchase recommendations using natural language. - Supports example queries like "find me a USB-C cable under $10" and returns structured results with buy links. - Activates when users mention shopping, buying, or searching for deals. - Requires API credentials for supported platforms.
● 无害
安装命令
点击复制官方npx clawhub@latest install agent-shopping
镜像加速npx clawhub@latest install agent-shopping --registry https://cn.longxiaskill.com