shop SKILL.md skillA
shop from saucesteals/shop is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add saucesteals/shop/shop@git:20261103.8a23fb3Pins git:20261103.8a23fb3 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- saucesteals/shop
- Path
SKILL.md- Versions recorded
- 16
- Latest version
- git:20261103.8a23fb3, committed Nov 3, 2026
- First version recorded
- Mar 27, 2026
- Size
- 16,765 bytes
- Repository stars
- 13
- License
- MIT
Multi-store shopping CLI. Search products, check prices, compare items, read reviews, manage carts, place orders, and track packages via the `shop` CLI. Use when asked to buy something, find a product, look up prices, add to cart, checkout, order, search for products, compare products, check availability, look at reviews, find deals, check a shipment, or save package tracking numbers. Currently supports Amazon (US/UK/DE/JP/CA/AU) and Facebook Marketplace (anonymous search and listing details).
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# shop Data commands default to JSON on stdout, with JSON errors on stderr. Pipe with `jq`. Use `--json` for machine parsing, including when `SHOP_OUTPUT=text` is set. `--text` is a human-readable display mode, not a stable parsing interface; it also formats errors as text without changing exit codes. **All prices are cents** (minor units). $29.99 = 2999. JPY = whole yen. ## Auth Auth is per-store. Amazon uses a device code flow — two calls to `shop login`: ```bash # 1. Start — returns challenge URL + code for user to enter shop login amazon # → .challenge.url and .challenge.code — user must visit URL and enter code # 2. Complete — run same command again after user authorizes shop login amazon # → .authenticated = true ``` ```bash shop whoami -s amazon # check auth state shop logout amazon # revoke + clear tokens ``` Auth persists in `~/.config/shop/auth/`. Store operations may require auth. Shipment tracking and its local shipment collection do not. On `auth_required` (exit 10) or `auth_expired` (exit 11), re-run login flow. ## Global Flags ``` -s, --store <name> # target store (default: config or $SHOP_STORE) …
Read the whole file at its exact version.
How to install
mdr add saucesteals/shop/shop@sha256:603a1de999dcd951The line at the top of this page pins the label git:20261103.8a23fb3, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4kkglrpcroct54um)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 16 versions of this file, between Mar 27, 2026 and Nov 3, 2026, about one every 15 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261103.8a23fb3 latest | 2026-11-03 | 8a23fb3 | 16,765 B | A | view · diff |
| git:20261002.1a7a960 | 2026-10-02 | 1a7a960 | 16,439 B | A | view · diff |
| git:20260927.8636360 | 2026-09-27 | 8636360 | 16,270 B | A | view · diff |
| git:20260927.99d9df8 | 2026-09-27 | 99d9df8 | 16,092 B | A | view · diff |
| git:20260927.b561dba | 2026-09-27 | b561dba | 15,718 B | A | view · diff |
| git:20260922.f9d685b | 2026-09-22 | f9d685b | 15,212 B | A | view · diff |
| git:20260920.d6202d8 | 2026-09-20 | d6202d8 | 14,701 B | A | view · diff |
| git:20260920.2b0ea87 | 2026-09-20 | 2b0ea87 | 14,522 B | A | view · diff |
| git:20260920.f2afdd4 | 2026-09-20 | f2afdd4 | 14,062 B | A | view · diff |
| git:20260919.bd747ad | 2026-09-19 | bd747ad | 13,205 B | A | view · diff |
| git:20260918.e105b8e | 2026-09-18 | e105b8e | 12,903 B | A | view · diff |
| git:20260911.f227785 | 2026-09-11 | f227785 | 9,612 B | A | view · diff |
| git:20260908.e6f08d6 | 2026-09-08 | e6f08d6 | 9,377 B | A | view · diff |
| git:20260328.92dc408 | 2026-03-28 | 92dc408 | 8,956 B | A | view · diff |
| git:20260327.5fd3b4c | 2026-03-27 | 5fd3b4c | 7,916 B | A | view · diff |
| git:20260327.2bd842e | 2026-03-27 | 2bd842e | 6,985 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16765 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
saucesteals/shop · 13 stars · license MIT · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4kkglrpcroct54um GET https://markdownregistry.com/api/v1/resolve?ref=saucesteals/shop/shop GET https://markdownregistry.com/api/v1/blob/603a1de999dcd9513b38d1ef3b0c5b068c39d4b26b82df66a952de79c31dcf10
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.