taobao-keyword-search — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited taobao-keyword-search (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
keyword + optional filters → paginated product listing (itemId, title, price, shop, image, sales)
All process output to user (progress updates, process notifications) follows the user's language.
Search Taobao/Tmall for products by keyword and extract product cards from search results pages.
https://s.taobao.com/searchIf browser-act has been confirmed available in the current session → skip this step.
Invoke browser-act via Skill tool to load usage. If installation or configuration issues arise, follow its guidance to resolve then retry.
If login status for Taobao has been confirmed in the current session → skip this step.
Otherwise: open https://www.taobao.com and observe the page header:
User refuses or cannot log in → terminate execution.
This Skill's operational boundary = what the user can manually do in their browser. It only reads data already displayed to the user on the page, never bypassing authentication or access controls. JS code is encapsulated in Python files under thescripts/directory, invoked viaeval "$(python scripts/xxx.py {params})".$(...)is bash syntax; it is recommended to use the bash tool for execution.
Navigate to search results URL, then extract:
navigate "https://s.taobao.com/search?q={keyword}&page={page}&ie=utf8"wait stableeval "$(python scripts/search-products.py '{keyword}' --page {page} --sort '{sort}' --tab '{tab}' --start-price {startPrice} --end-price {endPrice})"URL Parameters:
q: URL-encoded keywordpage: page number, 1-based, default 1sort: sort order — empty string (default/recommended), sale-desc (by sales), price-asc (price low→high), price-desc (price high→low)tab: mall for Tmall-only results; omit for all resultsstartPrice / endPrice: price range filter in yuan (e.g., startPrice=100&endPrice=500)Output example:
[
{
"itemId": "694593508978",
"itemUrl": "https://item.taobao.com/item.htm?id=694593508978",
"title": "蓝牙耳机2025新款官方",
"subTitle": "AI耳机热卖榜第1名",
"priceYuan": 79.9,
"priceDesc": "券后价",
"imageUrl": "https://img.alicdn.com/imgextra/...",
"salesCount": "40万+人付款",
"shopName": "金运旗舰店",
"location": "广东",
"rating": null,
"tags": ["政府补贴15%", "官方立减26元"]
}
]Notes:
priceYuan is the displayed price (may be post-coupon price, not pre-coupon)priceDesc indicates price type: 券后价 (after coupon), 补贴价 (subsidized price), etc.rating is rarely shown on search cards; null is expecteditemUrl pointing to click.simba.taobao.com — they will have itemId extracted from query params[collection failed] sort values: confirmed values are empty string (default), sale-desc, price-asc, price-desc; no API for enumeration, values are hardcoded constants.
URL Pagination: URL pattern https://s.taobao.com/search?q={keyword}&page={N}&ie=utf8, increment page from 1. Each page returns ~47 items. Termination: when result count < 10 or returned items duplicate previous page.
result count >= 1 and itemId non-null rate = 100%
startPrice/endPrice) filters on pre-coupon prices, so post-coupon prices displayed may fall outside the requested range near boundariesPath: {working-directory}/browser-act-skill-forge-memories/taobao-keyword-search.memory.md
Before execution: If the file exists, read it first — it records unexpected situations encountered during past executions (e.g., a strategy has become ineffective); adjust strategy order accordingly.
After execution: If an unexpected situation is encountered (strategy became ineffective, page redesigned, anti-scraping upgraded, better path discovered), append a line: {YYYY-MM-DD}: {what happened} → {conclusion}
Normal execution does not write to the file. Do not record what keywords were used or how many results were returned — those are task outputs, not experience.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.