SKILLEMALL.ai

A dataify-ebay-products

Collect eBay product records by product URL, category URL, keyword, or store URL. Do not use for Amazon, Walmart, or general shopping-search results.

ClawHub Agent Skills author: dataify-server v1.3.0 MIT-0 6 files body ≈ 2 878 tokens open source ↗ analyzed 28 h ago
ReferenceInfrastructuretype and topics are labelled automatically from the skill text
JSON
A
93/100
Overall score
Safety 60%
91
Quality 40%
95
Tests bonus
0

How to improve

  1. Add evals/evals.json with 4–6 real requests and expected answers: the full check will then use your cases instead of a model draft.
  2. Add a spec.yaml with triggers and assertions (skilltest init): the behaviour contract for CI.

Guard findings · 9

✓ No critical or high findings

Medium and low: 9
  • low Secrets in code secret-high-entropy-token references/modes-and-parameters.md:11
    High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
    | `url` | Yes | `https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=…
    table
  • low Secrets in code secret-high-entropy-token references/modes-and-parameters.md:24
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    [{"url":"https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=…
    quoted
  • low Secrets in code secret-high-entropy-token scripts/submit_dataify_ebay_products.py:32
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    DEFAULT_URL = "https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=…
    quoted
  • low Secrets in code secret-high-entropy-token SKILL.md:103
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    python3 ".\scripts\submit_dataify_ebay_products.py" --mode url --url "https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=
    quoted
  • low Secrets in code secret-high-entropy-token SKILL.md:133
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    python3 ".\scripts\submit_dataify_ebay_products.py" --mode url --params-json '[{"url":"https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…
    quoted
  • low Secrets in code secret-high-entropy-token SKILL.zh-CN.md:81
    High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
    | `url` | 是 | `https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=…
    table
  • low Secrets in code secret-high-entropy-token SKILL.zh-CN.md:95
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    [{"url":"https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=…
    quoted
  • low Secrets in code secret-high-entropy-token SKILL.zh-CN.md:211
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    python3 ".\scripts\submit_dataify_ebay_products.py" --mode url --url "https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…&itmprp=
    quoted
  • low Secrets in code secret-high-entropy-token SKILL.zh-CN.md:241
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    python3 ".\scripts\submit_dataify_ebay_products.py" --mode url --params-json '[{"url":"https://www.ebay.com/itm/187538926483?_skw=Apple&itmmeta=…&hash=…
    quoted

Files scanned: 6. Evidence is masked. Grey chips explain why severity was lowered.

Lint

✓ Lint: no remarks

Process maturity 67/100

  • 0Result and completion. Does not say what the result is
  • 30Running it twice. 1 mutating operations with no state check
  • 50When it triggers. No condition that starts the skill
  • 60Tools and files. Uses tools (bash, python) that frontmatter does not declare
  • 70Inputs and preconditions. Inputs and preconditions are listed
  • 100Steps. 60 steps
  • 100Failures and branches. 6 branches, has a failure section
  • 100Consistency. Name and required fields are in place
  • 100Execution cost. Instruction body is 2878 tokens
  • 100Progress reporting. Reports progress
  • medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
  • low 12 top-level sections: this looks like several domains in one skill

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

  • +5Description has no quoted example phrases that should trigger the skill
  • +3Output format is not stated: the model decides each time
  • +1No license
  • +2Single-language instructions
  • +4Description says when NOT to use the skill
  • +3Description length 149: enough signal without eating the budget
  • +4Structure: 13 headings
  • +3Step-by-step instructions: 60 items
  • +4Has examples (9 code blocks)
  • +4Reference files are cited in the instructions (1 of 1)
  • +3All 1 scripts are documented

Quality base 70; lint remarks subtract, signals add up to 100. Result: 95.

External checks

ClawHub: suspicious
The skill is a coherent Dataify eBay collection wrapper, but it needs Review because one localized instruction path can ask users to provide an API token in chat despite later saying not to.
LLM: suspicious (high) · VirusTotal: · 1 Sept 2026