Amazon Shipping Calculator
v1.0.0Calculate Amazon shipping and fulfillment costs for FBA and FBM. Dimensional weight, storage fees, removal fees, and long-term storage cost estimation.
⭐ 0· 311·1 current·1 all-time
bynexscope-ai@nexscope
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and listed capabilities (FBA/FBM fees, dimensional weight, storage/removal fees, comparisons) align. The skill does not request unrelated binaries, credentials, or config paths.
Instruction Scope
Runtime instructions are limited to collecting product/context from the user, asking a single follow-up, performing analysis, and returning structured recommendations. The wording 'Research and analyze' is vague and could lead an agent to perform web lookups or external queries, but the SKILL.md does not instruct access to user files, system credentials, or unrelated system state.
Install Mechanism
The manifest contains no install spec and there are no code files (instruction-only), which is low-risk. SKILL.md includes an 'Install' example calling 'npx skills add nexscope-ai/eCommerce-Skills', which references an external package/repo not validated here — this is an external action the user would run and is not part of the packaged skill itself.
Credentials
No environment variables, credentials, or config paths are requested. The declared requirements are proportional to the stated purpose.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request elevated persistence or modify other skills. Autonomous invocation is enabled by default but is not combined with other red flags here.
Assessment
This instruction-only skill appears coherent for calculating Amazon fulfillment and shipping costs. Before installing or running the suggested 'npx' command, verify the external package/repository (nexscope-ai/eCommerce-Skills) and the publisher to ensure you trust its code: inspect the GitHub repo and npm package, read recent reviews/commits, and confirm there are no unexpected post-install scripts. Be aware the SKILL.md is somewhat vague about 'research'—if the agent performs live web lookups, decide whether you want it to access the web. No credentials are requested by the skill itself, but avoid pasting sensitive account tokens or sales data into prompts unless you trust the implementation.Like a lobster shell, security has layers — review code before you run it.
latestvk970fz01gsyhkdj25mxgn0y9kh83krrg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.