pangolinfo-amazon-listing-optimization

• Risk level: Low
• Analyzed: Apr 23, 2026, 9:44 AM
• Findings: 0
• Version: 2.0.0

Overview

The skill's code, runtime instructions, and required credentials are consistent with an Amazon listing optimization toolkit that uses the Pangolinfo API; nothing in the bundle appears to request unrelated access or perform covert exfiltration.

This skill appears to do what it claims: it calls Pangolinfo APIs to scrape Amazon/Google SERP/external social sources and run WIPO checks. Before installing: (1) prefer providing an API key rather than your Pangolinfo account password; (2) avoid enabling the optional cache unless you want a token file at ~/.pangolinfo_api_key (the default is not to cache); (3) be aware that network requests and scraped data are sent to scrapeapi.pangolinfo.com (the stated backend); (4) the skill’s SOP suppresses raw JSON output by default, so expect summarized results rather than raw API payloads; (5) if you have privacy or billing concerns, create a separate Pangolinfo account or API key with limited credits. If you want deeper assurance, verify the Pangolinfo domain and review its privacy/terms or run the bundled self-test locally with non-sensitive credentials first.