📦 1688 Scraper — 1688商品批量采集
v1.0.0一键抓取1688商品页，自动提取标题、价格、SKU、店铺、销量、属性及高清图片，打包为结构化数据与本地图库，轻松完成选品与竞品分析。
0· 133·0 当前·0 累计
by 下载技能包
最后更新
2026/4/3
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it claims: open a 1688 product page in a browser context, scroll to trigger lazy-loading, capture image URLs and attributes, and download images + save a JSON data package to your Desktop. Before installing: (1) confirm where the 'browser' tool runs (local machine vs remote/cloud) — running a scraper in a remote/shared environment can expose scraped data and downloaded files to others; (2) note the code uses process.env.HOME to write to ~/Desktop but the skill metad...详细分析 ▾
ℹ 用途与能力
The name/description (scrape 1688 product pages and save images/JSON) aligns with the included code and SKILL.md: browser-driven scrolling, Performance API capture, URL cleaning, and curl-based downloads. package.json lists expected runtime requirements (browser tool, curl, desktop write). Minor mismatch: the code reads process.env.HOME to build a Desktop path but the skill's metadata does not declare any required environment variables or config paths.
✓ 指令范围
SKILL.md and README clearly instruct the agent to open the product URL in a browser context, deep-scroll to trigger lazy-loading, collect images and attributes, and download images to a local folder. The instructions do not attempt to read unrelated files, request unrelated credentials, or post collected data to external endpoints other than the image hosts (alicdn). They do assume the agent has a 'browser' tool and filesystem write access.
✓ 安装机制
No install spec is provided (instruction-only skill with an included helper JS file). That is low-risk: nothing is automatically downloaded or written during install. The skill expects existing tools (browser, curl) rather than installing arbitrary packages or fetching code from third‑party URLs.
ℹ 凭证需求
The skill does not request API keys/secrets and only interacts with public image hosts (cbu01.alicdn.com). However, it uses process.env.HOME in scraper.js to compute the Desktop path but the manifest declares no env variables — this is a small inconsistency that could cause runtime surprises if HOME is unset or if the agent's working environment differs. It also assumes write permission to the user's Desktop, which should be considered before running.
✓ 持久化与权限
always is false and the skill does not request persistent platform privileges; it only writes files under a constructed local path and does not modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with any other broad privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/3
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install 1688-scraper
镜像加速npx clawhub@latest install 1688-scraper --registry https://cn.longxiaskill.com