Amazon Product Research
v0.1.0Skill for Amazon product research, market validation, competitor analysis, ASIN review, pricing guidance, and product opportunity discovery. It turns ecommer...
⭐ 1· 181·0 current·0 all-time
byKevin Zhang@kevinzhangqi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and included workflow files all describe Amazon product/market research and consistently rely on APIClaw endpoints (categories, markets/search, products/search, products/competitor-lookup, realtime/product). The declared credential (APICLAW_API_KEY) and stated base URL match the described purpose.
Instruction Scope
SKILL.md and module files only instruct the agent to call APIClaw endpoints, use provided request templates, and produce reports. There are no instructions to read local files, other environment variables, or to send data to any endpoints beyond api.apiclaw.io.
Install Mechanism
No install specification and no code files — this is instruction-only, so nothing is written to disk or fetched at install time.
Credentials
The skill requires a single credential (APICLAW_API_KEY) which is explicitly scoped and used only for Authorization to https://api.apiclaw.io. No unrelated secrets, binaries, or config paths are requested.
Persistence & Privilege
No privileged flags set (always: false). The skill does not request permanent presence or modify other skills or system settings; it's a normal, user-invocable instruction-only skill.
Scan Findings in Context
[no_findings] expected: The regex-based scanner had no code to analyze (instruction-only files). Absence of scan findings is expected but does not replace a manual review of the SKILL.md, which was performed and found coherent.
Assessment
This skill appears to do what it claims: run Amazon research using APIClaw. Before installing, verify APIClaw (https://api.apiclaw.io) is a service you trust, create an API key with minimal privileges if possible, and avoid reusing a high-privilege key. Confirm pricing, data retention, and privacy terms on APIClaw. When using the skill, avoid sharing unrelated sensitive credentials or PII in prompts. If you need higher assurance, test with a limited/test API key and review logs of requests to ensure only expected endpoints are called.Like a lobster shell, security has layers — review code before you run it.
latestvk979mtvqmcfha90wrxcv8aremd82s9rj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
