Amazon Price History
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a coherent instruction-only Amazon pricing tracker, with the main things to notice being local file storage of pricing data and broad Bash access for that local workflow.
This skill appears benign and purpose-aligned. Before installing, be aware that it can use Bash and is designed to save Amazon pricing analysis under ~/price-tracker/, so avoid entering confidential business data unless you are comfortable storing it locally.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may use local shell/file operations to support the tracker, so mistakes could affect local workspace files.
The skill grants Bash access. The artifact does not show unsafe shell commands, and local file handling is aligned with its price-history workspace, but Bash is a broad tool capability users should notice.
allowed-tools: Bash
Use the skill for its stated price-tracking workflow and review any proposed shell/file operation before approving it.
Pricing history, cost structure, margins, and reports may remain on the local machine and could be reused in later analysis.
The skill intentionally creates persistent local records of price histories and analysis reports. This is disclosed and aligned with the tracker purpose, but the stored data may include sensitive business pricing, margin, and competitor information.
Creates `~/price-tracker/` containing: - `history/` — price logs per ASIN ... - `reports/` — full pricing reports
Only provide data you are comfortable storing locally, keep the workspace private, and periodically review or delete saved tracker files if they are no longer needed.