Amazon Ads Report

AdvisoryAudited by Static analysis on May 7, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing and using this skill can let the agent access Amazon Ads report data for authorized advertising accounts.

Why it was flagged

The skill relies on a separate Amazon Ads auth skill and uses authorized account/profile information to access reports.

Skill content
本技能依赖 linkfox-amazon-ads-auth ... 先调 `linkfox-amazon-ads-auth` 的 `authorized_stores.py` 拉出用户已授权的账号 × 站点清单。
Recommendation

Only use it with accounts you intend the agent to report on, and review the linked auth skill and granted Amazon Ads permissions.

What this means

Report data may be accessible through a local link for about five minutes; this is bounded to localhost by default but still contains business-sensitive data.

Why it was flagged

Downloaded report files are exposed through a temporary localhost HTTP server by default.

Skill content
`serveExtractedFileHttp` | true ... `serveHost` | `127.0.0.1` ... `serveSeconds` | 300
Recommendation

Keep the server bound to 127.0.0.1, avoid sharing the temporary link, and disable `serveExtractedFileHttp` when a local file path is sufficient.

What this means

The report skill’s security depends on the separate auth skill that manages Amazon Ads authorization.

Why it was flagged

The report skill depends on another skill for authentication, so the safety of credential handling is partly outside this artifact set.

Skill content
**依赖 `linkfox-amazon-ads-auth`**(脚本启动自动检查;未安装时 exit 42,stderr 打 `DEPENDENCY_MISSING`)。
Recommendation

Review and install the auth dependency from a trusted source before using this report skill.