Mpstats Ozon Product Detail
PassAudited by ClawScan on May 6, 2026.
Overview
This skill coherently queries Ozon product details through a disclosed LinkFox API, with the main thing to notice being its use of a LinkFox API key.
This appears safe for its stated purpose: querying Ozon SKU detail data through LinkFox. Before installing, confirm you trust LinkFox with the SKU lists and date ranges you submit, and configure only a limited LinkFox API key that you can rotate or revoke.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your Ozon SKU lookup requests are sent to LinkFox for processing; the artifacts do not show local mutation or destructive actions.
The helper sends SKU query parameters to an external LinkFox gateway. This is disclosed and matches the skill purpose, but users should be aware that their queried product IDs and date ranges leave the local environment.
API_URL = "https://tool-gateway.linkfox.com/mpstats/ozon/productDetail"
Use the skill only for SKU lists you are comfortable submitting to LinkFox, and keep requests within the documented 100-SKU batch limit.
If installed and used, the skill can make authorized LinkFox gateway requests with the configured API key, potentially consuming API quota or access tied to that key.
The script reads a LinkFox API key from the environment and uses it for authorization. This is expected for the integrated service, but the registry requirements say no required env vars or primary credential.
key = os.environ.get("LINKFOXAGENT_API_KEY") ... "Authorization": api_keyThe publisher should declare LINKFOXAGENT_API_KEY as a required credential/env var; users should provide only a scoped, revocable key intended for LinkFox MPSTATS lookups.