Amazon Review Request Optimizer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is mostly a manual Amazon review-planning helper, but it can use Bash and save business review data locally, so users should review commands and stored files.

Before installing, be comfortable with a skill that can use Bash and save Amazon review audit data locally. Do not paste unnecessary buyer personal information, review any command or file write before approving it, and verify all generated review-request templates against current Amazon policy before using them in Seller Central or third-party tools.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent may be able to run local shell commands, even though the described workflow mainly needs analysis and scoped file saving.

Why it was flagged

The skill is instruction-only and mainly works from pasted data, but it grants the agent shell access. The artifact does not show unsafe commands, so this is a notice about broad local capability rather than a concrete misuse.

Skill content
allowed-tools: Bash
Recommendation

Review any proposed Bash command before allowing it, and prefer limiting file operations to the disclosed ~/amazon-reviews/ workspace.

What this means

ASIN performance details, sales estimates, and messaging history may persist locally and be reused in later work.

Why it was flagged

The skill discloses persistent local storage of product-review audit data and generated templates. This is aligned with the review-optimization purpose, but users should understand that the data may remain on disk.

Skill content
Creates `~/amazon-reviews/` containing:
- `memory.md` — saved ASIN profiles, category baselines, and velocity history
- `templates/` — approved message templates saved as markdown
- `audits/` — past audit reports
Recommendation

Avoid entering unnecessary buyer personal data, review the saved files periodically, and delete ~/amazon-reviews/ if you no longer want the data retained.

What this means

Over-reliance on generated templates could create account-health risk if Amazon policies have changed or the template is applied in the wrong context.

Why it was flagged

The skill makes a strong compliance and account-safety claim. The rest of the artifact includes compliance guidance, so this appears purpose-aligned, but Amazon policy compliance should not be treated as guaranteed.

Skill content
generates compliant follow-up messaging that maximizes response rates without risking account health
Recommendation

Use generated messages as drafts and verify them against current Amazon Seller Central policies before sending.