/

/maishou

商品价格全网对比技能，获取商品在淘宝(Taobao)、天猫(TMall)、京东(JD.com)、拼多多(PinDuoDuo)、抖音(Douyin)、快手(KaiShou)的最优价格、优惠券，当用户想购物或者获取优惠信息时使用。Get the best price, coupons for goods on Chinese e-commerce platforms, compare product prices, and use when users want to shop or get discount information.

2 files
5.3 KB
Updated 7 months ago
GitHub
1 alert

Ask your Agent

Use this Skill: https://skilld.dev/gh/aahl/skills/maishou

This session only. Nothing lands on disk.

SKILL.md

955 B raw

≈100 tokens always: the name and description. ≈132 when used: this file.

买手技能

全网比价，获取中国在线购物平台商品价格、优惠券

# 参数解释
source:
  0: 全部
  1: 淘宝/天猫
  2: 京东
  3: 拼多多
  4: 苏宁
  5: 唯品会
  6: 考拉
  7: 抖音
  8: 快手
  10: 1688

搜索商品

uv run scripts/main.py search --source=0 --keyword='{keyword}'
uv run scripts/main.py search --source=0 --keyword='{keyword}' --page=2

商品详情及购买链接

uv run scripts/main.py detail --source={source} --id={goodsId}

Source: SKILL.md on GitHub

Third-party checks

1 alert16d5 checks · Risk HIGH

Gen Agent Trust Hub16d
The skill is vulnerable to command injection via its search keyword parameter, allowing unauthorized shell commands to be executed on the system. It also contains hardcoded authentication credentials and processes untrusted data from an external API without proper validation.
Socket16d
1 alert: gptAnomaly
Snyk16d
Risk: MEDIUM · 2 issues
Runlayer7mo
1/2 files flagged
ZeroLeaks5mo
Score: 93/100 · 2 sections analyzed

Provenance

Signed by skilld at e11555d. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 weeks ago.

Activeupdated 7 months ago