📦 Taobao Native CLI — 淘宝桌面购物助手
v1.0.41通过淘宝桌面客户端，实现商品搜索、详情查看、加购下单、订单查询、物流追踪等一站式购物操作，无需打开网页即可完成全流程。
1· 486·9 当前·9 累计
by 下载技能包
最后更新
2026/4/10
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: control a locally installed Taobao desktop CLI. Before installing or enabling it, confirm you have (or want) the official Taobao desktop client installed locally. The skill may run local taobao-native commands and write output files to the agent workspace, and it includes instructions (only with user consent) to download and run a Taobao installer from tblifecdn.taobao.com — treat that like any installer: verify the URL and perform installs yourself rather ...详细分析 ▾
✓ 用途与能力
Name/description (Taobao Desktop CLI helper) match the declared requirements: it requires the local taobao-native binary and references Taobao-specific config paths (%APPDATA%/taobao/... and ~/Library/…/taobao-runner). Those requirements are appropriate for a desktop-CLI based shopping assistant.
ℹ 指令范围
SKILL.md tells the agent to run local taobao-native commands, read/write result files (recommended into the task workspace), read the declared install-location file and the taobao-runner path, and to refresh PATH in-session as a fallback. These actions are within the skill's stated purpose, but they do permit the agent to execute local CLI commands and update the session PATH (non-persistent). The doc explicitly says not to auto-install unless the user requests, which limits scope creep.
ℹ 安装机制
There is no automated install spec in the skill bundle (instruction-only). A reference file documents an official-looking CDN download URL (tblifecdn.taobao.com) and silent install commands as a user-initiated procedure. Downloading and running executables is higher-risk in general, but here it is described as manual/user-initiated; the presence of a vendor CDN link is expected for this purpose. If you allow the agent to perform installs, that increases risk.
✓ 凭证需求
The skill requests no environment variables or credentials. The only requested local artifacts are the two Taobao-specific config paths and the presence of the taobao-native binary, which are proportionate to its functionality.
✓ 持久化与权限
The skill is not forced-always, does not request persistent/privileged system changes, and does not attempt to modify other skills or system-wide agent settings. It suggests temporarily updating the session PATH for command discovery, which is non-persistent and reasonable for its purpose.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSWindows · macOS
版本
latestv1.0.412026/3/24
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install taobao-native
镜像加速npx clawhub@latest install taobao-native --registry https://cn.longxiaskill.com