📦 1688-product-to-ozon — 1688商品一键铺货到Ozon
v1.2.1通过Ozon官方API，把1688单品标题、价格、图片、属性自动映射并上传至Ozon，实时回传上架状态，支持批量查询，解决跨境卖家手动铺货慢、易错的问题。
1· 327·1 当前·2 累计
by 下载技能包
最后更新
2026/3/23
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to implement exactly what it claims (mapping 1688 items and uploading them to Ozon using Ozon + AlphaShop APIs), but pay attention to these points before installing or providing secrets:
- Metadata mismatch: The registry metadata states no required env vars, but the SKILL.md and scripts require OZON_API_KEY, OZON_CLIENT_ID and ALPHASHOP_ACCESS_KEY/ALPHASHOP_SECRET_KEY. Do not trust the registry summary alone—use the SKILL.md and code to understand requirements.
- Secrets: The...详细分析 ▾
ℹ 用途与能力
The skill's name/description (map 1688 products to Ozon and upload them) aligns with the included scripts which call Ozon and AlphaShop APIs. However the registry metadata claims no required environment variables or primary credential while the SKILL.md and scripts clearly require OZON_API_KEY, OZON_CLIENT_ID and ALPHASHOP_ACCESS_KEY/ALPHASHOP_SECRET_KEY. That metadata omission is inconsistent and should be corrected/clarified.
✓ 指令范围
SKILL.md and the scripts instruct only to query category mappings, fetch Ozon attributes, translate images via AlphaShop, build Ozon-format JSON and call Ozon APIs. The scripts only read environment variables, make HTTPS requests to api.alphashop.cn and api-seller.ozon.ru, and write local JSON files; they do not attempt to read unrelated system files or network endpoints beyond the documented services.
ℹ 安装机制
This is an instruction-only skill with bundled Python scripts and a requirements.txt (requests, PyJWT) but no install spec. That is operationally inconsistent: the code will run but dependencies may not be automatically installed by the platform. From a security perspective there is no opaque remote download; code is present and readable, which reduces hidden risk but means the platform will execute provided scripts — review dependencies and runtime environment before running.
⚠ 凭证需求
The SKILL.md requires multiple secret environment variables (OZON_API_KEY, OZON_CLIENT_ID, ALPHASHOP_ACCESS_KEY, ALPHASHOP_SECRET_KEY) and an optional OZON_CURRENCY, which are appropriate for the declared integrations. The concern is that the skill registry metadata declared no required envs/primary credential, creating a mismatch that could lead users to install or run the skill without realizing it needs sensitive keys. Ensure you only provide the minimal keys needed and understand where they will be stored (the SKILL.md suggests a path under ~/.openclaw).
✓ 持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. It does expect (and document) a local config file path under ~/.openclaw/skillconfig/1688-Product-to-Ozon/ozon_config.json, which is a per-skill config location. It does not modify other skills or system-wide settings in the provided code.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.12026/3/23
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install 1688-product-to-ozon
镜像加速npx clawhub@latest install 1688-product-to-ozon --registry https://cn.longxiaskill.com