Amazon Review Monitor

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

Running the skill will contact Amazon review pages and may generate multiple requests depending on the requested page count.

Why it was flagged

The script sends network requests based on user-supplied ASIN, marketplace, and page values. This is expected for an Amazon review monitor, but users should understand it performs web scraping.

Skill content

url = f"https://www.amazon.{marketplace}/product-reviews/{asin}?pageNumber={page}&sortBy=recent"

Recommendation

Use valid Amazon marketplaces and reasonable page counts, and ensure this type of scraping is acceptable for your use case.

Note

ASI06: Memory and Context Poisoning

What this means

Review text, ratings, themes, and generated response drafts may remain on disk after the command finishes.

Why it was flagged

The skill saves scraped review text and analysis to a local JSON report. This is purpose-aligned, but it creates persistent local data from retrieved web content.

Skill content

report_file = os.path.join(report_dir, f"reviews-{asin}.json")
with open(report_file, "w") as f:
    json.dump(result, f, indent=2, default=str)

Recommendation

Review or delete saved reports when no longer needed, especially if review content includes sensitive customer complaints or business information.