📦 Yundian Woo Importer — 云点 Woo 导入器
v1.0.0云店WooCommerce导入工具，批量导入商品数据到WooCommerce商店。
0· 143·0 当前·0 累计
by @colaliang下载技能包
最后更新
2026/3/21
安全扫描
OpenClaw
安全
medium confidenceThe skill's code, instructions, and required API key are internally consistent with an importer that forwards import requests to a Yundian+ API, but there are minor mismatches and trust decisions you should review before installing.
评估建议
This skill forwards import requests to an external Yundian+ API and requires you to provide an API key. Before installing: (1) Confirm the API_URL (https://ydplus.net) is correct and trusted — the skill will send product URLs and import parameters there. (2) Be aware the SKILL.md expects YUNDIAN_WOO_IMPORTER_API_URL but the skill only declares the API key as required; explicitly set the API_URL in your MCP config. (3) Review the provider's privacy/security policy to understand what data they sto...详细分析 ▾
✓ 用途与能力
The skill claims to import products into WooCommerce and implements an MCP server that POSTs import requests to an external Yundian+ API using a single API key. Required binaries (node, npm, npx) and the @modelcontextprotocol dependency are appropriate for running the provided TypeScript MCP server.
ℹ 指令范围
SKILL.md correctly instructs adding an MCP server entry that runs mcp-server.ts and maps the API key. However the example also sets YUNDIAN_WOO_IMPORTER_API_URL in the MCP config (https://ydplus.net) even though YUNDIAN_WOO_IMPORTER_API_URL is not declared in requires.env. The MCP server will forward whatever import arguments (platform, product links, etc.) to the external API_URL, so product data and any arguments passed to the tool are sent to that external endpoint — this is expected but you should confirm you trust that remote service and understand what data is transmitted.
✓ 安装机制
There is no high-risk installer: the skill is instruction-only with a small package.json referencing @modelcontextprotocol/sdk and metadata suggesting 'npm install'. No downloads from obscure URLs or archive extraction are present.
ℹ 凭证需求
The sole declared required secret is YUNDIAN_WOO_IMPORTER_API_KEY, which is proportionate for an API-backed importer. Two points to note: (1) SKILL.md and the example MCP config expect YUNDIAN_WOO_IMPORTER_API_URL but it is not listed in requires.env; (2) whatever API_URL you configure will receive import payloads (including product links and platform identifiers). Only provide your API key to services you trust and verify the API_URL is the intended endpoint.
✓ 持久化与权限
always is false and the skill does not request elevated privileges or modify other skills. It does instruct the user to add an MCP server entry to their local OpenClaw config — that is normal for MCP-based skills.
⚠ mcp-server.ts:17
Environment variable access combined with network send.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/21
Initial release of yundian-woo-importer. - Import products from Shopify, Wix, WordPress, and Amazon directly into WooCommerce using natural language commands. - Seamless integration with OpenClaw via a bundled MCP server. - Supports queuing imports, tracking status, and error handling through two tools: `import_products` and `check_import_status`. - Requires API key configuration and MCP setup. - Detailed instructions provided for setup and agent usage.
● 无害
安装命令
点击复制官方npx clawhub@latest install yundian-woo-importer
镜像加速npx clawhub@latest install yundian-woo-importer --registry https://cn.longxiaskill.com