Mpstats Ozon Product Detail
PassAudited by VirusTotal on May 6, 2026.
Overview
Type: OpenClaw Skill Name: linkfox-mpstats-ozon-product-detail Version: 1.0.0 The skill bundle is a legitimate tool for batch-fetching Ozon product details via the MPSTATS API. The Python script (mpstats_ozon_product_detail.py) uses standard libraries to make authenticated POST requests to a documented gateway and does not exhibit any signs of data exfiltration, malicious execution, or prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your Ozon SKU lookup requests are sent to LinkFox for processing; the artifacts do not show local mutation or destructive actions.
The helper sends SKU query parameters to an external LinkFox gateway. This is disclosed and matches the skill purpose, but users should be aware that their queried product IDs and date ranges leave the local environment.
API_URL = "https://tool-gateway.linkfox.com/mpstats/ozon/productDetail"
Use the skill only for SKU lists you are comfortable submitting to LinkFox, and keep requests within the documented 100-SKU batch limit.
If installed and used, the skill can make authorized LinkFox gateway requests with the configured API key, potentially consuming API quota or access tied to that key.
The script reads a LinkFox API key from the environment and uses it for authorization. This is expected for the integrated service, but the registry requirements say no required env vars or primary credential.
key = os.environ.get("LINKFOXAGENT_API_KEY") ... "Authorization": api_keyThe publisher should declare LINKFOXAGENT_API_KEY as a required credential/env var; users should provide only a scoped, revocable key intended for LinkFox MPSTATS lookups.