技能 taiwan-produce
📦

taiwan-produce

内容修订 r1 安全 ⚙️ 外部命令🌐 网络访问📁 文件系统访问

Check Taiwan Wholesale Produce Prices

Taiwan produce prices vary by market and trading date, making comparisons difficult. This skill guides CSV retrieval and filtering to report wholesale prices and volumes.

支持: Claude Codex Code(CC)
🥉 77 青铜

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "taiwan-produce" from https://skillstore.io/skills/tahodev-taiwan-produce.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-produce/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/tahodev-taiwan-produce.md 已签名 manifest GET /api/skills/tahodev-taiwan-produce/manifest 已签名 lockfile GET /api/skills/tahodev-taiwan-produce/lockfile

测试它

正在使用“taiwan-produce”。 Show the documented banana price example for Taipei Second Market.

预期结果:

  • Historical example from the skill documentation, not a current lookup: September 18, 2026, Taipei Second Market, bananas.
  • Wholesale prices: high 52.2, middle 26.8, low 16.4, and average 29.8 TWD per kilogram.
  • Trading volume: 11,047 kilograms. These figures are wholesale prices, not retail prices.

正在使用“taiwan-produce”。 What should the response say if the dataset download fails after one retry?

预期结果:

The data source remains unavailable after one retry. I cannot report verified wholesale prices for this request.

安全审计

安全
v1 • 2026/10/13 打开版本化报告

Eight alerts are false positives: Markdown fences, a public government download URL, UTF-8 BOM handling, and readable multilingual text. Two filesystem alerts identify a predictable shared temporary file that permits symlink overwrites or local data tampering. No evidence found of prompt injection, credential collection, or data exfiltration.

1
已扫描文件
60
分析行数
2
复核项
0
已忽略误报
能力复核项 (2)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

中
SKILL.md:25
Temp directory access
curl -sm 40 -A 'Mozilla/5.0' 'https://data.moa.gov.tw/Service/OpenData/FromM/FarmTransData.aspx?FOTT
curl writes to the predictable shared path /tmp/produce.csv without exclusive creation. A local attacker could precreate a symlink and cause an accessible target file to be overwritten.
中
SKILL.md:34
Temp directory access
raw = open('/tmp/produce.csv', 'rb').read().decode('utf-8-sig') # BOM 要處理
The parser reads the same shared temporary path without ownership or integrity checks. A local attacker could replace the CSV between download and parsing, corrupting reported prices.

风险因素

⚙️ 外部命令 (4)
SKILL.md:24-26 SKILL.md:26-32 SKILL.md:32-40 SKILL.md:40-59
🌐 网络访问 (2)
SKILL.md:25 SKILL.md:59
📁 文件系统访问 (2)
SKILL.md:25 SKILL.md:34
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/tahodev-taiwan-produce/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/tahodev-taiwan-produce/security.svg)](https://skillstore.io/skills/tahodev-taiwan-produce?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/tahodev-taiwan-produce?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-produce/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-produce.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

tahodev. (2026). taiwan-produce security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-produce/audits/1

BibTeX 引用

@techreport{tahodev-tahodev-taiwan-produce-2026, author = {tahodev}, title = {taiwan-produce security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/tahodev-taiwan-produce/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "taiwan-produce security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "tahodev" date-released: "2026-10-13" url: "https://skillstore.io/skills/tahodev-taiwan-produce/audits/1" identifiers: - type: other value: "skillstore:tahodev-taiwan-produce:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
85
可维护性
87
内容
65
社区
83
规范符合性

你能构建什么

Compare Purchasing Benchmarks

Compare a crop across wholesale markets using average prices, trading volumes, and clearly labeled dates.

Review Recent Market Activity

Check recent wholesale prices and volumes for a specific crop before discussing market conditions.

Prepare Sourced Price Summaries

Create dated wholesale price summaries while separating transaction data from retail prices and noting incomplete same-day records.

试试这些提示

Look Up One Crop 
Find the latest banana wholesale prices at Taipei Second Market. Include the trading date, price levels, average price, and volume.
Resolve a Crop Name 
Look up cabbage wholesale prices. If the crop name is ambiguous, list nearby dataset names and ask me to confirm before reporting prices.
Compare Markets 
Compare banana wholesale prices across available Taipei markets on the latest shared trading date. Include price levels, volumes, and missing market records.
Analyze Recent Changes 
Compare banana average wholesale prices and volumes at Taipei Second Market across available dates. Show daily changes and distinguish incomplete same-day data.

最佳实践

  • Always include the trading date, wholesale label, price units, and volume units in each report.
  • Confirm exact crop names and compare markets using the same trading date.
  • Use a private temporary directory for downloads and mark same-day figures as provisional.

避免

  • Treating wholesale prices as supermarket prices or guaranteed retail offers.
  • Presenting historical examples or remembered prices as current source data.
  • Combining different crop varieties or trading dates without explicit confirmation and labeling.

常见问题

Does this skill require an API key?
No. The documented Ministry of Agriculture CSV endpoint requires neither an API key nor a login.
Does it provide retail prices?
No. It covers wholesale market transactions, not supermarket shelf prices or individual vendor prices.
Which markets and dates are available?
The documented September 2026 test covered 24 markets and four trading days. Current coverage depends on the downloaded dataset.
Why can the crop name fail to match?
Dataset names can differ from common names. The skill directs the assistant to list nearby names and request confirmation.
Are same-day figures final?
Not necessarily. Records update during trading, so same-day prices and volumes should be marked as provisional.
What happens when the download fails?
The documented workflow retries once, then reports a source problem. It should not replace missing data with remembered prices.

开发者详情

作者

tahodev

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

仓库

https://github.com/tahodev/baodao-skill/tree/3ce4b58e4525f5a66390e1236b6d38702790225a/taiwan-produce

引用

2aab20a3878daa05021884e089a7dd7739e08581

维护新鲜度

2026/10/13

使用量

0 次下载 · 0 次浏览

文件结构

📄 SKILL.md

tahodev 的更多技能

查看全部

相关技能

查看全部