Skills taiwan-produce

📦

taiwan-produce

Name: taiwan-produce
Author: tahodev

Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Check Taiwan Wholesale Produce Prices

Taiwan produce prices vary by market and trading date, making comparisons difficult. This skill guides CSV retrieval and filtering to report wholesale prices and volumes.

Supports: Claude Codex Code(CC)

🥉 77 Bronze

Maintain this Skill? Claim it 🥉 77 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "taiwan-produce" from https://skillstore.io/skills/tahodev-taiwan-produce.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-produce/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tahodev-taiwan-produce.md Signed manifest GET /api/skills/tahodev-taiwan-produce/manifest Signed lockfile GET /api/skills/tahodev-taiwan-produce/lockfile

Test it

Using "taiwan-produce". Show the documented banana price example for Taipei Second Market.

Expected outcome:

Historical example from the skill documentation, not a current lookup: September 18, 2026, Taipei Second Market, bananas.
Wholesale prices: high 52.2, middle 26.8, low 16.4, and average 29.8 TWD per kilogram.
Trading volume: 11,047 kilograms. These figures are wholesale prices, not retail prices.

Using "taiwan-produce". What should the response say if the dataset download fails after one retry?

Expected outcome:

The data source remains unavailable after one retry. I cannot report verified wholesale prices for this request.

Security Audit

Safe

v1 • 10/13/2026 Open versioned report

Eight alerts are false positives: Markdown fences, a public government download URL, UTF-8 BOM handling, and readable multilingual text. Two filesystem alerts identify a predictable shared temporary file that permits symlink overwrites or local data tampering. No evidence found of prompt injection, credential collection, or data exfiltration.

Files scanned

Lines analyzed

Review items

False positives ignored

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:25

Temp directory access

curl -sm 40 -A 'Mozilla/5.0' 'https://data.moa.gov.tw/Service/OpenData/FromM/FarmTransData.aspx?FOTT

curl writes to the predictable shared path /tmp/produce.csv without exclusive creation. A local attacker could precreate a symlink and cause an accessible target file to be overwritten.

Medium

SKILL.md:34

Temp directory access

raw = open('/tmp/produce.csv', 'rb').read().decode('utf-8-sig') # BOM 要處理

The parser reads the same shared temporary path without ownership or integrity checks. A local attacker could replace the CSV between download and parsing, corrupting reported prices.

Risk Factors

⚙️ External commands (4)

SKILL.md:24-26 SKILL.md:26-32 SKILL.md:32-40 SKILL.md:40-59

🌐 Network access (2)

SKILL.md:25 SKILL.md:59

📁 Filesystem access (2)

SKILL.md:25 SKILL.md:34

Audited by: codex

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tahodev-taiwan-produce/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-taiwan-produce/security.svg)](https://skillstore.io/skills/tahodev-taiwan-produce?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tahodev-taiwan-produce?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-produce/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-produce.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tahodev. (2026). taiwan-produce security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-produce/audits/1

BibTeX citation

@techreport{tahodev-tahodev-taiwan-produce-2026,
  author = {tahodev},
  title = {taiwan-produce security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tahodev-taiwan-produce/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-produce security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-produce/audits/1"
identifiers:
  - type: other
    value: "skillstore:tahodev-taiwan-produce:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Compare Purchasing Benchmarks

Compare a crop across wholesale markets using average prices, trading volumes, and clearly labeled dates.

Review Recent Market Activity

Check recent wholesale prices and volumes for a specific crop before discussing market conditions.

Prepare Sourced Price Summaries

Create dated wholesale price summaries while separating transaction data from retail prices and noting incomplete same-day records.

Try These Prompts

Look Up One Crop

Find the latest banana wholesale prices at Taipei Second Market. Include the trading date, price levels, average price, and volume.

Resolve a Crop Name

Look up cabbage wholesale prices. If the crop name is ambiguous, list nearby dataset names and ask me to confirm before reporting prices.

Compare Markets

Compare banana wholesale prices across available Taipei markets on the latest shared trading date. Include price levels, volumes, and missing market records.

Analyze Recent Changes

Compare banana average wholesale prices and volumes at Taipei Second Market across available dates. Show daily changes and distinguish incomplete same-day data.

Best Practices

Always include the trading date, wholesale label, price units, and volume units in each report.
Confirm exact crop names and compare markets using the same trading date.
Use a private temporary directory for downloads and mark same-day figures as provisional.

Avoid

Treating wholesale prices as supermarket prices or guaranteed retail offers.
Presenting historical examples or remembered prices as current source data.
Combining different crop varieties or trading dates without explicit confirmation and labeling.

Frequently Asked Questions

Does this skill require an API key?

No. The documented Ministry of Agriculture CSV endpoint requires neither an API key nor a login.

Does it provide retail prices?

No. It covers wholesale market transactions, not supermarket shelf prices or individual vendor prices.

Which markets and dates are available?

The documented September 2026 test covered 24 markets and four trading days. Current coverage depends on the downloaded dataset.

Why can the crop name fail to match?

Dataset names can differ from common names. The skill directs the assistant to list nearby names and request confirmation.

Are same-day figures final?

Not necessarily. Records update during trading, so same-day prices and volumes should be marked as provisional.

What happens when the download fails?

The documented workflow retries once, then reports a source problem. It should not replace missing data with remembered prices.

Developer Details

Author

tahodev

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/tahodev/baodao-skill/tree/3ce4b58e4525f5a66390e1236b6d38702790225a/taiwan-produce

Ref

2aab20a3878daa05021884e089a7dd7739e08581

Maintenance freshness

10/13/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md