Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add linkfox-ai/linkfox-skills --skill linkfox-1688-sourcinggit clone --depth 1 https://github.com/linkfox-ai/linkfox-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/linkfox-ai/linkfox-skills/linkfox-1688-sourcing)<a href="https://agentmods.dev/skills/linkfox-ai/linkfox-skills/linkfox-1688-sourcing"><img src="https://agentmods.dev/badge/skills/linkfox-ai/linkfox-skills/linkfox-1688-sourcing/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/linkfox-ai/linkfox-skills/linkfox-1688-sourcing"><img src="https://agentmods.dev/badge/skills/linkfox-ai/linkfox-skills/linkfox-1688-sourcing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 167 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high YARA Match · line 5 YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).Fix: Remove offensive tool references and exploit code. Legitimate agent skills should not contain penetration testing tools, exploit frameworks, or reconnaissance utilities.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.05700 |
| Opus 5 | $0.00000 | $0.02850 |
| Sonnet 5 | $0.00000 | $0.01140 |
| Haiku 4.5 | $0.00000 | $0.00570 |
Grade A, and why
linkfox-1688-sourcing scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **完整参数**：每个子能力的请求参数、响应字段、错误码、curl 示例见 `references/<源skill>.md`（文件内含该子能力 SKILL.md 正文与 api.md 全文；采购另含 workflow.md 流程地图）。 How it starts
The opening of the file, as written. The whole thing — 179 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Linkfox 1688货源（1688 Sourcing）
1688 货源一站式 AI 工具集，整合 3 类底层工具、4 项子能力，覆盖货源搜索与热销榜单、以图搜图、已授权采购履约。各子能力完整参数、响应字段与错误码见 references/ 下对应文件，可执行脚本见 scripts/。
能力边界
✅ 能力范围
- 货源搜索与榜单（
1688_sourcing）：商品搜索（linkfox-dld-product-search，按关键词/商品链接/商品 ID 检索 1688 批发商品，近 7 天/30 天销量周期，按价格/销量/销售额/上架时间排序，按公司类型/卖家会员/发货时间/代发权益/面单支持等筛选）、商品热销榜单（linkfox-dld-product-billboard，周榜/月榜，按销售笔数/销售额/销量排序，发现爆款与趋势货源）。返回批发价、代发价、销售笔数/件数、预估销售额、起批量、供应商资质、店铺与商品链接等。 - 以图搜图（
1688_search_by_image）：1688 以图搜图（linkfox-1688-search-by-image，通过图片 URL/Base64/imageId 视觉检索外观相似或同款货源），返回标题、批发价、代发价、月销量、起批量、复购率、交易评分、商家身份（超级工厂/实力商家/诚信通）等；支持价格/筛选（1688 严选/认证工厂/发货时效/品质退款率等）/排序/分页；本地图片先用upload_image.py上传获取公网 URL（有效期 24h）。 - 采购履约（
1688_procurement）：1688 采购全流程（linkfox-1688-procurement），覆盖 OAuth 授权检查与发起授权、SKU/规格与收货地址查询、下单预览、创建订单、获取支付链接、订单状态、物流概览与物流轨迹、取消订单、确认收货。除授权类操作外每个 endpoint 前自动校验当前用户 ACTIVE 且未过期的 1688 授权；高风险写操作（创建订单/支付链接/取消订单/确认收货）需用户单独中文确认后由 Agent 注入对应 boolean 安全字段。 - 数据平台均为中国大陆 1688 批发平台（阿里巴巴国内 B2B 市场），无多站点概念。
❌ 边界与限制
- API Key 必需：所有工具均需环境变量
LINKFOX_AGENT_API_KEY（或LINKFOXAGENT_API_KEY）；各工具独立计费、独立限频。 - 计费约束：商品搜索/热销榜单固定计费（成功约 9 积分/18000 token），以图搜图固定计费（约 4.5 积分/9000 token），采购履约各操作消耗积分；同一会话同一参数组合默认只调用一次（搜索/榜单/图搜脚本带 24h 本地缓存）；失败、空结果、参数不全或授权不足不得自动换关键词、翻页或连续试探；需继续检索时先向用户说明会产生额外消耗（各工具计费规则见
skills-version.json对应条目与 references 内 api.md）。 - 采购授权前置：采购类操作依赖当前用户已授权的 1688 OAuth；无 ACTIVE 授权时不调用目标 endpoint；高风险写操作失败不自动重试；不向用户索要 1688 token/refresh token/callback code/app secret。
- 不在范围内：Amazon/TikTok/沃尔玛等其他平台选品（用对应平台技能）；Alibaba.com 国际站数据；1688 店铺级分析（店铺流量/排名/评分）；商品评论分析；价格历史与趋势分析；图片生成或编辑；物流成本计算与货代；实时库存与订单系统对接；与供应商或平台的直接沟通。
- 数据时效：商品搜索/榜单为店雷达分析数据（7 天/30 天/周榜近 90 天/月榜近 12 个月）；以图搜图为实时搜索、不入库、无法二次 SQL 处理；采购履约为依赖 OAuth 的实时接口。
工具选择指南
按需求在下表定到子能力，再跳到【业务需求路由速查】查端点/脚本/references 取参执行。
| 需求 / 用户说 | 默认推荐（子能力） | 何时换用其他 |
|---|---|---|
| 关键词找 1688 货源 / 找供应商（"1688 上找 XX 货源"） | linkfox-dld-product-search（关键词搜索，7/30 天销量） |
要看周/月排行榜用 linkfox-dld-product-billboard；有图片找同款用 linkfox-1688-search-by-image |
| 1688 什么好卖 / 趋势 / 热销榜（"1688 热销榜""什么火"） | linkfox-dld-product-billboard（周榜/月榜排名） |
要按关键词实时搜 + 销量筛选用 linkfox-dld-product-search |
| 用图片找 1688 同款 / 以图搜图（"用图找货源""找同款"） | linkfox-1688-search-by-image（唯一图搜，需图片 URL） |
本地图片先 upload_image.py 上传换公网 URL；要按关键词文本搜索用 linkfox-dld-product-search |
| 按商品 ID / 商品链接查 1688 商品 | linkfox-dld-product-search（支持 goodsUrl/productIds） |
仅按 ID 查榜单商品也可用 linkfox-dld-product-billboard |
| 工厂直供 / 超级工厂 / OEM 供应商（"找工厂""顶级工厂"） | linkfox-dld-product-search（companyType=2/shiLiType=superFactory） |
要榜单里的工厂货用 linkfox-dld-product-billboard |
| 1688 一件代发货源（"一件代发""支持代发"） | linkfox-dld-product-search（proxyRights=4360897） |
要榜单代发货用 linkfox-dld-product-billboard |
| 跨境货源 / 出口商品（"跨境商品""1688 严选"） | linkfox-dld-product-search（offerType=4） |
要图搜跨境同款用 linkfox-1688-search-by-image（filter=1688Selection） |
| 1688 新品 / 最近上架（"新品""最近上的"） | linkfox-dld-product-search（sortField=offerCreateTime） |
要榜单新品用 linkfox-dld-product-billboard（offerType=2） |
| 对比供应商 / 跨供应商比价 | linkfox-dld-product-search（多维排序） |
— |
| 查我的 1688 授权店铺（"我的 1688 授权"） | linkfox-1688-procurement（authorized_stores.py） |
— |
| 生成 1688 授权链接（"授权 1688"） | linkfox-1688-procurement（authorize_url.py） |
— |
| 查 offerId 的 SKU / 规格 / 起订量 / 库存 | linkfox-1688-procurement（sku.py） |
找 offerId 先用图搜或商品搜索 |
| 查 1688 收货地址 | linkfox-1688-procurement（receive_address_list.py） |
— |
| 预览 1688 订单（"帮我预览订单"） | linkfox-1688-procurement（order_preview.py） |
— |
| 1688 下单 / 获取支付链接（"确认下单""获取支付链接"） | linkfox-1688-procurement（create_order.py/payment_url.py，高风险需确认） |
— |
| 查 1688 订单状态 / 物流 / 物流轨迹 | linkfox-1688-procurement（order_status.py/logistics.py/logistics_trace.py） |
— |
| 取消 1688 订单 / 确认收货（"取消订单""确认收货"） | linkfox-1688-procurement（cancel_order.py/confirm_receive.py，高风险需确认） |
— |
What ships with it
23 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/linkfox-1688-procurement.md 23 KB
- references/linkfox-1688-search-by-image.md 15 KB
- references/linkfox-dld-product-billboard.md 13 KB
- references/linkfox-dld-product-search.md 12 KB
- references/onboarding.md 2.0 KB
- scripts/_alibaba1688_common.py 12 KB runs code
- scripts/alibaba1688_image_search.py 12 KB runs code
- scripts/authorize_url.py 124 B runs code
- scripts/authorized_stores.py 128 B runs code
- scripts/cancel_order.py 123 B runs code
- scripts/confirm_receive.py 126 B runs code
- scripts/create_order.py 123 B runs code
- scripts/dld_product_billboard.py 13 KB runs code
- scripts/dld_product_search.py 13 KB runs code
- scripts/logistics_trace.py 126 B runs code
- scripts/logistics.py 121 B runs code
- scripts/onboarding.py 24 KB runs code
- scripts/order_preview.py 124 B runs code
- scripts/order_status.py 123 B runs code
- scripts/payment_url.py 122 B runs code
- scripts/receive_address_list.py 130 B runs code
- scripts/sku.py 115 B runs code
- scripts/upload_image.py 4.5 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 179 lines · 0 tokens per session scan A d592ab0b8f4a
linkfox-1688-sourcing is a skill published in the GitHub repository linkfox-ai/linkfox-skills (101 stars, last pushed 22d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 5,700 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
review-analyzer-skill
A review-analysis tool for studying product reviews, also called voice-of-the-customer analysis. It turns review data into labelled customer patterns, findings, reports, and visual dashboards.
shadcn
Manages shadcn components and projects — adding, searching, fixing, debugging, styling, and composing UI. Provides project context, component docs, and usage examples. Applies when working with shadcn/ui, component registries, presets, --preset codes, or any project with a components.json file. Also triggers for…
animate
Build an animation from scratch, making the decisions in the order that determines whether it feels right — should it animate at all, what purpose, which tool, which properties, which curve and duration, how it interrupts, how it exits. Writes the implementation. Use when asked to animate something, add motion, make a…
emil-design-eng
This skill encodes Emil Kowalski's philosophy on UI polish, component design, animation decisions, and the invisible details that make software feel great.
saleor-paper-storefront
Project-specific patterns for the Saleor Paper storefront built with Next.js 16, TypeScript, and Tailwind CSS. Use when working with product pages, checkout flow, caching, variant selection, filtering, SEO, or UI components. For universal Saleor API patterns, see the saleor-storefront dependency.
paper-migrations
Apply chronological Paper storefront upgrades to a forked shop. Use when the user says upgrade Paper, apply Paper migrations, catch up with upstream caching, or paper-version. Reads migrations/manifest.json and paper-version.json; ports architecture without overwriting custom styling.