skills/openclaw/skills/1688-ranking/Gen Agent Trust Hub

1688-ranking

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: All network operations are directed to the official 1688 Open Platform gateway at 'gw.open.1688.com'. No unauthorized third-party communication was detected.- [DATA_EXFILTRATION]: The skill transmits application credentials (AppKey and AppSecret) to 'gw.open.1688.com' for the purpose of obtaining and refreshing OAuth access tokens. This activity is restricted to the legitimate service provider and is essential for the skill's functionality.- [COMMAND_EXECUTION]: Python scripts are used to interface with the 1688 API. These scripts (scripts/ranking.py, scripts/category.py) accept structured arguments such as category IDs and numeric limits, which are used as parameters for the API requests without being executed as arbitrary shell commands.- [SAFE]: The skill maintains a local authentication cache at '~/.openclaw/workspace/skills/.1688_token_cache.json'. This file stores the current access_token and refresh_token to avoid redundant authentication flows across related skills. This is a standard practice for managing API sessions in this environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 08:16 AM