Amazon Rank Tracker

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only e-commerce rank-tracking adviser with no code or credential requirements, though users should verify the external install command before running it.

This skill appears safe to use as an instruction-only ranking strategy assistant. Before running the optional install command in SKILL.md, verify the linked GitHub collection and publisher because it installs into the agent environment globally.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user runs the command, it could add skills from the linked external collection into their environment.

Why it was flagged

This disclosed setup snippet asks the user to install a skill from an external GitHub collection globally. It is user-directed rather than automatic, but it affects the agent environment and should be verified.

Skill content
npx skills add nexscope-ai/eCommerce-Skills --skill amazon-rank-tracker -g
Recommendation

Only run the install command after confirming the repository and publisher are trusted; prefer pinned or reviewed sources when available.