Amazon Brand Analytics

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only analytics skill; the only notable point is that its README-style install snippet points users to a remote/global install command.

This skill appears safe to use as an instruction-only analytics helper. Before running the optional npx install command shown in SKILL.md, verify the external repository and confirm you are comfortable installing it globally.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user chooses to run the install command, they are trusting an external repository and global skill installation path.

Why it was flagged

The skill documents a user-run install command that pulls from an external repository and installs globally. This is disclosed and setup-related, but the registry provides no source homepage or install spec to further verify it here.

Skill content

npx skills add nexscope-ai/eCommerce-Skills --skill amazon-brand-analytics -g

Recommendation

Review the referenced repository and ensure it is the intended source before running the npx install command, especially with the global flag.