Amazon Competitor Analyzer

Things to check before installing or running this skill: - Expectation mismatch: The registry metadata omits the required SKILLBOSS_API_KEY but both the SKILL.md and the script require it. Treat the skill as requiring that credential unless the publisher corrects the metadata. - Limit secrets: Only provide a SkillBoss API key. Do not place other sensitive credentials in a .env file in the skill directory — the script will load any key=value pairs it finds there into the environment. - Code review: The included Python file calls https://api.skillboss.co and sends scraped Amazon page content to SkillBoss (scraper + LLM extraction). If you rely on SkillBoss, confirm their privacy/retention policy and that sending full page text is acceptable for your data. - Legal/TOS: Scraping Amazon may violate Amazon's terms of service — confirm this is acceptable for your use case and jurisdiction. - Run in isolation: When testing, run the script in an isolated environment (ephemeral container or VM) with only the SkillBoss key configured to limit accidental exposure of other secrets or files. - If you need higher assurance: ask the publisher to (a) fix registry metadata to declare SKILLBOSS_API_KEY, (b) remove automatic loading of arbitrary .env files or limit it to only the expected key, and (c) provide a reproducible, signed release or provenance for the code. If the publisher cannot explain the metadata mismatch, treat the package with extra caution.