📦 Product Recommender — 智能商品推荐
v1.0.0面向零售数字员工的智能商品推荐引擎，可根据顾客需求、预算、受礼人、场合及偏好等多维信息，精准推送匹配商品，提升转化与复购。
0· 132·1 当前·1 累计
by 下载技能包
最后更新
2026/3/23
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears coherent for recommending products: it runs a local Python script against a provided knowledge_base.json and uses deterministic filtering/scoring. Before installing/using: 1) Review the complete scripts/recommend.py file (the submission truncated the file end) to confirm the main() function does not perform unexpected I/O or network calls. 2) Ensure the agent will be given only trusted knowledge_base JSON files (don't point --kb at sensitive local files). 3) If you rely on inv...详细分析 ▾
✓ 用途与能力
Name/description (product recommendation) match the included SKILL.md and the recommend.py logic: intent extraction, budget/constraint filtering, scoring, upsell logic and presentation. Required resources (a products[] knowledge base) are consistent with the stated purpose; no unrelated credentials or binaries are requested.
ℹ 指令范围
SKILL.md stays within the recommender domain: it instructs extracting intent signals, running scripts/recommend.py, and returning 3 curated items. It does mention logging 'feature_request' and session state (e.g., upsell_declined) which are not fully implemented in the visible code — minor scope mismatch but not evidence of malicious behavior. The runtime instructions do require a knowledge_base.json path; ensure that path only points to intended product data (the script will read any file given).
✓ 安装机制
No install spec (instruction-only with an included script). That is low-risk: nothing is downloaded or installed automatically by the skill.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The code likewise does not reference secrets or external tokens in the visible portion.
✓ 持久化与权限
always is false and the skill does not request persistent system-wide privileges. The script appears to be a transient CLI utility that reads a KB and returns recommendations; it does not modify other skills or system settings in the visible code.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/23
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install product-recommender
镜像加速npx clawhub@latest install product-recommender --registry https://cn.longxiaskill.com