技能 taiwan-oil-price
📦
taiwan-oil-price
內容修訂 r1 安全 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取
Check Taiwan CPC Fuel Prices
Fuel price announcements can differ from prices currently in effect. This skill retrieves official CPC prices and recent history with clear effective dates and units.
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "taiwan-oil-price" from https://skillstore.io/skills/tahodev-taiwan-oil-price.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-oil-price/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「taiwan-oil-price」。 Show an example CPC fuel price report with an effective date.
預期結果:
- Illustrative historical example from the skill documentation, not a live lookup.
- Effective date: 2026-09-21.
- 92 unleaded: TWD 31.2 per liter.
- 95 unleaded: TWD 32.7 per liter.
- 98 unleaded: TWD 34.7 per liter.
- Premium diesel: TWD 29.9 per liter.
正在使用「taiwan-oil-price」。 If prices retrieved on Sunday take effect on Monday, are they already current?
預期結果:
- The retrieved prices are announced prices for Monday, not prices already in effect on Sunday.
- Use the previous effective price record for Sunday and label Monday's prices with their effective date.
正在使用「taiwan-oil-price」。 Both official sources failed. What are the latest prices?
預期結果:
Current prices could not be verified because both official sources failed. No price figures are reported.
安全審計
安全v1 • 2026/10/13 開啟版本化報告
Markdown formatting, public CPC URLs, Python HTML decoding, and readable multilingual text explain 18 false positives. Four temporary-file findings expose overwrite or data-tampering risks through predictable shared paths. No evidence found of prompt injection, credential access, or data exfiltration.
1
已掃描檔案
73
分析行數
4
複核項目
0
已忽略的誤報
能力複核項目 (4)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
中
Temp directory access
curl -sm 30 'https://vipmbr.cpc.com.tw/opendata/sixtypeoillistprice' -o /tmp/oil.json
curl writes to the predictable shared path /tmp/oil.json without exclusive creation. A preexisting symlink can redirect writes to files writable by the caller.
中
Temp directory access
jq -r '.[] | select(.型別名稱=="汽柴油零售") | "\(.產品名稱) \(.參考牌價_金額) \(.牌價生效日期)"' /tmp/oil.json
jq trusts a predictable shared temporary file without ownership or integrity checks. Local replacement or concurrent downloads can corrupt reported prices.
中
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://www.cpc.com.tw/historyprice.aspx?n=2890' -o /tmp/cpc.html
curl writes to the fixed shared path /tmp/cpc.html without exclusive creation. A preexisting symlink can cause unintended overwrite under the caller's permissions.
中
Temp directory access
t = open('/tmp/cpc.html', encoding='utf-8', errors='replace').read()
Python reads a predictable shared HTML file without verifying ownership or provenance. Local file substitution or concurrent runs can inject false historical price rows.
風險因素
⚙️ 外部命令 (13)
🌐 網路存取 (3)
📁 檔案系統存取 (4)
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/tahodev-taiwan-oil-price/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/tahodev-taiwan-oil-price?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/tahodev-taiwan-oil-price?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-oil-price/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-oil-price.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
tahodev. (2026). taiwan-oil-price security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-oil-price/audits/1BibTeX 引用
@techreport{tahodev-tahodev-taiwan-oil-price-2026,
author = {tahodev},
title = {taiwan-oil-price security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-taiwan-oil-price/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-oil-price security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-oil-price/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-taiwan-oil-price:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Check Published Pump Prices
Retrieve CPC gasoline and diesel list prices with effective dates before planning a fuel purchase.
Review Recent Fuel Costs
Compare recent weekly premium diesel list prices for transport cost planning.
Prepare Price Updates
Summarize official weekly announcements and distinguish future effective dates from prices already in effect.
試試這些提示
Check Gasoline Prices
Show the latest official CPC prices for 92, 95, and 98 gasoline. Include units and the effective date.
Check Next Week's Announcement
Has CPC announced next week's prices? Separate announced prices from currently effective prices, and do not forecast unpublished changes.
Compare Weekly Diesel Prices
Show available premium diesel prices for approximately seven recent weeks. Convert ROC dates and calculate consecutive weekly changes.
Verify Sources and Fallbacks
Retrieve CPC retail fuel prices and effective dates. Use private temporary files and the history fallback if needed. Report source failures without inventing values.
最佳實務
- Include the source, effective date, currency, and pricing unit with every price report.
- Check effective dates before calling an announcement the current price, and convert ROC dates explicitly.
- Use private temporary files, check retrieval success, and report source failures without substituting unsupported values.
避免
- Presenting the documentation's historical sample prices as a current lookup.
- Predicting unpublished prices or treating future effective prices as already active.
- Mixing CPC list prices with station discounts, other suppliers, or incompatible pricing units.
常見問題
Do I need an API key or login?
No. The documented CPC open-data endpoint and public history page require neither.
Which fuels are covered?
The main workflow covers 92, 95, and 98 unleaded gasoline and premium diesel. Other dataset categories require separate filtering and unit checks.
Can it tell me next week's prices?
Yes, after CPC publishes the announcement. It uses the effective date to identify next-week prices and does not predict unpublished changes.
How much price history is available?
The documented history page exposes approximately seven recent weeks. Older records require additional queries outside this skill.
What happens when a source fails?
The workflow falls back from open data to the history page. If both sources fail, it reports unavailable data without inventing prices.
Are these individual station prices?
No. These are CPC published list prices, not station discounts or Formosa Petrochemical prices.