可信 — 风险评分 5/100
上次扫描:1 天前 重新扫描
5 /100
PriceTide
Shopping timing decision skill for Chinese e-commerce platforms that tells users whether to buy now, wait, watch for events, or stop chasing a price
PriceTide is a legitimate shopping timing decision skill with no security concerns - all capabilities are properly documented, no malicious patterns detected, and the only shell usage is a standard publishing script.
技能名称PriceTide
分析耗时28.3s
引擎pi
可以安装
This skill is safe to use. The publish.sh script requires the clawhub CLI tool and is only used for publishing workflow.
资源类型声明权限推断权限状态证据
文件系统 NONE READ ✓ 一致 publish.sh reads package.json and CHANGELOG.md for metadata
网络访问 READ READ ✓ 一致 SKILL.md declares browser workflow for public pages
命令执行 WRITE WRITE ✓ 一致 publish.sh executes clawhub CLI
环境变量 NONE NONE No environment variable access
技能调用 NONE NONE Skill does not invoke other skills
剪贴板 NONE NONE No clipboard access
浏览器 READ READ ✓ 一致 SKILL.md declares reading public product/campaign pages only
数据库 NONE NONE No database access

目录结构

8 文件 · 20.8 KB · 671 行
Markdown 4f · 592L JSON 2f · 38L Shell 1f · 37L YAML 1f · 4L
├─ 📁 agents
│ └─ 📋 openai.yaml YAML 4L · 438 B
├─ 📁 scripts
│ └─ 🔧 publish.sh Shell 37L · 1.2 KB
├─ 📝 CHANGELOG.md Markdown 16L · 865 B
├─ 📋 clawhub.json JSON 10L · 522 B
├─ 📋 package.json JSON 28L · 647 B
├─ 📝 README.md Markdown 115L · 3.2 KB
├─ 📝 RELEASE.md Markdown 92L · 2.1 KB
└─ 📝 SKILL.md Markdown 369L · 11.9 KB

安全亮点

✓ Comprehensive SKILL.md with clear capability declarations
✓ Safety boundary table explicitly lists what the agent can and cannot do
✓ Browser workflow limited to public pages with explicit stop points (no login, payment)
✓ No credential harvesting, data exfiltration, or obfuscation patterns
✓ Shell usage only in documented publishing script requiring CLI tool
✓ Clean codebase with no suspicious patterns (no base64, eval, direct IPs)
✓ MIT license with public GitHub repository reference