ClawHub

amazon-buy-box-monitor-api-skill

v1.0.0

This skill helps users extract basic product details other sellers prices and seller ratings from Amazon via ASIN automatically using the BrowserAct API. Age...

⭐ 0· 57·0 current·0 all-time
bybrowser-act@browseract-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the behavior: the script submits an ASIN and marketplace URL to BrowserAct and polls for results. Requested env var (BROWSERACT_API_KEY) is appropriate. Minor mismatch: the runtime depends on the Python 'requests' library but the skill metadata only lists 'python' as a required binary and does not declare Python package dependencies.
✓
Instruction Scope
SKILL.md instructs the agent to check BROWSERACT_API_KEY, invoke the included script with ASIN and marketplace URL, and handle simple retry/error logic. The instructions do not ask the agent to read unrelated files, other env vars, or to exfiltrate data to unexpected endpoints — the only external endpoint is api.browseract.com, which is consistent with the stated purpose.
✓
Install Mechanism
No install spec (instruction-only) and the included script is a straightforward Python client that uses standard HTTP calls. There are no downloads from untrusted URLs or archive extraction. Note: no guidance is provided to ensure the 'requests' package is available; the agent/user must ensure appropriate Python dependencies are installed.
✓
Credentials
Only BROWSERACT_API_KEY is required, which is proportional to a skill that calls the BrowserAct API. No unrelated credentials or config paths are requested.
✓
Persistence & Privilege
The skill does not request permanent/always-on presence (always: false) and does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but not excessive here.
Assessment
This skill appears to do exactly what it says: it sends the ASIN and marketplace URL to BrowserAct using the BROWSERACT_API_KEY and prints the returned data. Before installing: 1) Only provide a BrowserAct API key you trust — the key will be sent to api.browseract.com and can be used to run tasks in your account. 2) Ensure Python and the 'requests' package are available in the execution environment. 3) Review BrowserAct's terms and billing (calls may incur charges) and monitor API key usage. 4) If you need stronger assurance, review the included script locally to confirm no changes are needed and consider using a key with limited scope or rotation. Overall this skill is coherent, but security depends on trusting the external BrowserAct service and protecting the API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk9705hx0b25nkzhszazp36srkn83qp9f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌐 Clawdis
Binspython
EnvBROWSERACT_API_KEY

Comments