amazon-listing-competitor-analysis-skill
v1.0.0This skill helps users analyze Amazon competitor listings by ASIN and produce structured competitive intelligence plus strategic opportunity points for their...
⭐ 0· 64·0 current·0 all-time
bybrowser-act@browseract-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to extract and analyze Amazon listings and requires only python and a BrowserAct API key (BROWSERACT_API_KEY). The included script calls BrowserAct APIs to run a browser extraction workflow (consistent with the stated purpose). No unrelated binaries or credentials are requested.
Instruction Scope
SKILL.md restricts actions to two phases: run BrowserAct extraction (Phase 1) and perform analysis (Phase 2) on the returned structured payload. Instructions only reference the declared env var and the provided script; they do not direct reading unrelated files, accessing other credentials, or sending data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded or installed by the registry. The package includes a Python script that will run locally; that is proportionate for this task and poses low install risk.
Credentials
Only BROWSERACT_API_KEY is required and justified because the script uses the BrowserAct API. No other secrets or unrelated environment variables are requested. The script obtains the key from the declared env var and does not attempt to read other environment values.
Persistence & Privilege
The skill does not request persistent/always-on privileges (always: false). It does not modify other skills or system-wide configs and runs only when invoked.
Assessment
The package appears internally consistent, but review these practical points before installing: 1) Trust & data flow: the script sends the ASIN and marketplace to BrowserAct (an external service). Ensure you trust BrowserAct and that sending the scraped listing data to that service complies with your policies and any terms of service. 2) Keep the API key secret: BROWSERACT_API_KEY is required — treat it like any other secret and do not paste it into chat or share it. 3) Output contents: the script prints the full task JSON (including review text and seller info). Be mindful if that output contains user-generated text or potential PII. 4) Rate limits & cost: errors related to concurrency or plan limits are handled by the script; confirm your BrowserAct plan to avoid surprise failures or charges. 5) Source provenance: owner and homepage are unknown. If you need higher assurance, run the included Python script in an isolated environment (local machine or isolated container) and inspect network calls, or obtain the BrowserAct template/owner info directly from BrowserAct. Overall, the skill is coherent for its stated purpose, but verify external service trust and credential handling before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97cgb2fs1zj5k1hb5dfxbgvcn84c1p4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis
Binspython
EnvBROWSERACT_API_KEY