Amazon Ads Report

PassAudited by ClawScan on May 7, 2026.

Overview

This skill is coherently designed to fetch Amazon Ads reports, but it necessarily uses Amazon Ads authorization and temporarily exposes downloaded report data locally.

Before installing, confirm that you trust the linked Amazon Ads auth skill and are comfortable letting the agent retrieve Amazon advertising performance reports. Keep temporary report links local, disable the local HTTP server if unnecessary, and avoid broad/unfiltered reports unless you intend to share that data with the agent.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing and using this skill can let the agent access Amazon Ads report data for authorized advertising accounts.

Why it was flagged

The skill relies on a separate Amazon Ads auth skill and uses authorized account/profile information to access reports.

Skill content
本技能依赖 linkfox-amazon-ads-auth ... 先调 `linkfox-amazon-ads-auth` 的 `authorized_stores.py` 拉出用户已授权的账号 × 站点清单。
Recommendation

Only use it with accounts you intend the agent to report on, and review the linked auth skill and granted Amazon Ads permissions.

What this means

Report data may be accessible through a local link for about five minutes; this is bounded to localhost by default but still contains business-sensitive data.

Why it was flagged

Downloaded report files are exposed through a temporary localhost HTTP server by default.

Skill content
`serveExtractedFileHttp` | true ... `serveHost` | `127.0.0.1` ... `serveSeconds` | 300
Recommendation

Keep the server bound to 127.0.0.1, avoid sharing the temporary link, and disable `serveExtractedFileHttp` when a local file path is sufficient.

What this means

The report skill’s security depends on the separate auth skill that manages Amazon Ads authorization.

Why it was flagged

The report skill depends on another skill for authentication, so the safety of credential handling is partly outside this artifact set.

Skill content
**依赖 `linkfox-amazon-ads-auth`**(脚本启动自动检查;未安装时 exit 42,stderr 打 `DEPENDENCY_MISSING`)。
Recommendation

Review and install the auth dependency from a trusted source before using this report skill.