Amazon Logistics Calculator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a logistics cost-calculation skill with no credentials or code, though it allows Bash and mentions saving shipment profiles.
This skill looks safe to use for estimating FBA logistics costs. Be careful with commercially sensitive product values or shipment details, and treat any local `logistics` command as trusted only if you know where it came from.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may try to run local shell commands for this calculator rather than only doing text-based calculations.
The skill allows Bash and presents a command-style calculator interface. The visible commands are aligned with the logistics purpose and are not destructive, but Bash is a broad local tool permission.
allowed-tools: Bash ... logistics calc # interactive shipping cost calculator
Allow only calculator-related commands, and if a `logistics` command is not already trusted or installed, ask the agent to compute manually from the provided formulas.
Shipment details and product value information could be retained if the save feature is used.
The skill documents a user-directed save function for shipment profiles, which could persist product, quantity, origin, destination, and value information.
logistics save [shipment] # save shipment profile
Before saving profiles, confirm where the information is stored, how to delete it, and avoid saving sensitive commercial details unless needed.