Amazon Ads Entity

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a coherent read-only Amazon Ads listing skill, but it relies on LinkFox/Amazon Ads credentials and an external gateway that users should trust before use.

Install this only if you trust LinkFox and the companion auth skill with your Amazon Ads account access. Set `LINKFOXAGENT_API_KEY` deliberately, avoid overriding the gateway URL unless you control it, and use filters to limit how much account data is retrieved.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Info

#ASI02: Tool Misuse and Exploitation

What this means

A broad query may retrieve thousands of advertising records from the selected account profile.

Why it was flagged

The skill can automatically page through a large number of Amazon Ads entities. This is disclosed and read-only, but users should understand the breadth of data retrieval.

Skill content

fetchAll=true（默认）跟随分页 token 到结束或 maxPages=50 兜底（约 5000 条，超出标 truncated=true）

Recommendation

Use campaign, ad group, state, ASIN, or SKU filters when possible, and check the `truncated` flag in results.

Medium

#ASI03: Identity and Privilege Abuse

What this means

Whoever runs the skill with this key can read Amazon Ads entity metadata for authorized profiles.

Why it was flagged

The skill requires a LinkFox API key to access Amazon Ads token/profile functions. This is purpose-aligned, but it is sensitive credential use and the registry requirements list no required env vars or primary credential.

Skill content

鉴权：环境变量 `LINKFOXAGENT_API_KEY`

Recommendation

Set `LINKFOXAGENT_API_KEY` only in a trusted environment, verify the authorized Amazon Ads profiles, and prefer registry metadata that explicitly declares this credential requirement.

Medium

#ASI07: Insecure Inter-Agent Communication

What this means

Your API key, Amazon Ads token, profile ID, and query body may be sent to the configured gateway endpoint.

Why it was flagged

Requests, profile IDs, and Amazon Ads access tokens are sent through a LinkFox gateway, and an environment variable can override the gateway base URL. This is coherent with the integration, but it is a sensitive data boundary.

Skill content

API_BASE_URL = os.environ.get("AMAZON_ADS_BASE_URL") or "https://tool-gateway.linkfox.com" ... "amzAccessToken": access_token

Recommendation

Use the default gateway only if you trust LinkFox with this integration, and do not set `AMAZON_ADS_BASE_URL` to an untrusted endpoint.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Using the skill may require adding another skill that handles Amazon Ads authorization.

Why it was flagged

The skill depends on a separate auth skill and suggests installing it when missing. This dependency is disclosed and purpose-aligned, but installing an auth-related skill should be user-approved and trusted.

Skill content

invoke it to install 'linkfox-amazon-ads-auth' immediately

Recommendation

Install `linkfox-amazon-ads-auth` only from a trusted source and after confirming that you want this Amazon Ads authorization dependency.