Amazon Buy Box Strategy
v1.0.0Win and maintain the Amazon Buy Box. Analyze Buy Box eligibility factors, competitor pricing dynamics, and develop pricing and fulfillment strategies to maxi...
⭐ 0· 90·0 current·0 all-time
bynexscope-ai@nexscope
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description claim advisory and analytical Buy Box strategy capabilities. The SKILL.md contains only guidance for collecting user inputs and producing recommendations; nothing in the manifest unexpectedly requires cloud credentials, payment keys, or unrelated platform access. For an advice-only skill, the lack of required env vars or binaries is proportionate.
Instruction Scope
The runtime instructions are high-level: collect user-provided product/context info, ask one follow-up, analyze using internal frameworks, and return recommendations. The phrase 'Research and analyze' is vague and could lead the agent to fetch live competitor data (which would require APIs or scraping), but the SKILL.md does not instruct the agent to read local files, environment variables, or transmit data to third-party endpoints. Expect the skill to rely on user-supplied data unless additional integration steps are taken.
Install Mechanism
Registry metadata shows no install spec (instruction-only), but SKILL.md includes an install snippet that runs 'npx skills add nexscope-ai/eCommerce-Skills --skill amazon-buy-box -g'. This is an inconsistency: the skill package itself has no install manifest, yet the docs recommend installing a third-party package. That install command would pull external code if followed — evaluate that external package separately before running it.
Credentials
No environment variables, credentials, or config paths are declared or referenced. For a diagnostic/advisory skill that produces strategy recommendations based on user input, this is appropriate. If you later integrate live platform data (Amazon, Shopify, etc.), those integrations would legitimately require platform API keys; the current skill does not request them.
Persistence & Privilege
The skill does not request always:true and the manifest shows default invocation settings. As an instruction-only skill it does not persist code or modify other skills. No excessive privilege is requested.
Assessment
This skill appears to be an advisory tool and doesn't request credentials or install code in the manifest, so it is internally consistent for providing Buy Box strategy advice. Two practical cautions: (1) SKILL.md recommends installing an external package via npx — if you follow that command, review the nexscope-ai/eCommerce-Skills repo before running it because that would download and run third-party code; (2) if you want live Buy Box or competitor data, you will need to provide platform API credentials or upload data — the skill as written does not do that automatically. If you require automatic integrations, ask the publisher which exact permissions or tokens are needed and inspect any install package prior to executing it.Like a lobster shell, security has layers — review code before you run it.
latestvk97680w06mjq53fkm8n116mtq983gven
License
MIT-0
Free to use, modify, and redistribute. No attribution required.