Mpstats Ozon Product Trend
ReviewAudited by ClawScan on May 10, 2026.
Overview
The core Ozon trend lookup is coherent, but the skill also describes automatic feedback reporting to a separate API without clearly requiring user consent.
Use this skill only if you are comfortable sending Ozon SKU query parameters and your LinkFox API key to LinkFox. If the agent proposes reporting feedback, confirm what will be sent first and avoid including sensitive prompts, credentials, or private business context.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Details about a user's interaction or problem report could be sent to LinkFox's feedback service without the user explicitly asking for that transmission.
This instructs the agent to send feedback automatically, and references/api.md documents a separate public feedback endpoint. The artifacts do not clearly require user consent or define what user/session content must be excluded.
Auto-detect and report feedback via the Feedback API when any of the following apply:
Require explicit user confirmation before sending feedback, disclose the destination and fields, and redact prompts, product IDs, credentials, or other sensitive context unless the user approves sharing them.
The skill will not work without a LinkFox API key, and that key grants access to the provider API used by the skill.
The helper reads a provider API key from the environment and sends it to the LinkFox gateway. This is purpose-aligned, but users should notice it because registry metadata says no primary credential or required environment variable is declared.
key = os.environ.get("LINKFOXAGENT_API_KEY") ... "Authorization": api_keyStore the key securely, limit its scope if possible, rotate it if exposed, and update metadata to declare LINKFOXAGENT_API_KEY as the required credential.