Pangolinfo Amazon Niche Data (Niche Intelligence & Category)
v1.0.1Amazon niche & category intelligence (category tree, search, paths, filtering by business metrics).
⭐ 1· 61·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: the script POSTs to Pangolinfo AmzScope endpoints (scrapeapi.pangolinfo.com) and implements the five documented APIs. Required env vars are PANGOLINFO_API_KEY or PANGOLINFO_EMAIL+PANGOLINFO_PASSWORD, which are appropriate for this API client.
Instruction Scope
Runtime instructions are limited to running the included Python client and an optional self-test. The self-test will execute all five APIs and consume user credits (documented). The SKILL.md and references explicitly state credentials are kept in-memory unless the user opts into caching; the code implements a cache file (~/.pangolinfo_api_key) but only if caching is enabled. Recommend users avoid running self_test.sh unless they understand the credit costs.
Install Mechanism
No install spec; this is an instruction-only skill that includes zero-dependency Python source files. Nothing downloads or extracts remote archives. Execution uses standard library urllib and writes files only if the user opts into caching.
Credentials
Only PANGOLINFO_API_KEY or email+password are required — proportional to the skill purpose. No unrelated credentials or broad environment access are requested. Note: optional caching can persist the API key to ~/.pangolinfo_api_key if the user enables --cache-key or PANGOLINFO_CACHE, as documented.
Persistence & Privilege
Skill does not request always:true or any elevated platform privilege. It will not persist secrets unless the user explicitly opts in via CLI flag or env var; caching behavior and file path are documented.
Assessment
This skill appears coherent and implements a Pangolinfo AmzScope client. Before installing/use: 1) Verify you trust pangolinfo.com / scrapeapi.pangolinfo.com as the API endpoint; 2) Keep your API key in environment variables (PANGOLINFO_API_KEY) rather than pasting it into shared outputs; 3) Do not enable caching (--cache-key or PANGOLINFO_CACHE) unless you want the API key persisted to ~/.pangolinfo_api_key; the script attempts to set secure permissions but falls back to simpler writes if that fails; 4) The included self-test runs multiple API calls and will consume credits—only run it if you accept the charge; 5) If you want extra assurance, review the rest of the Python source that implements CLI parsing to confirm the cache flag behavior and that no other data is read or exfiltrated.Like a lobster shell, security has layers — review code before you run it.
latestvk976hk2sjasyfrf3sjx5wsj89x84srkn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvPANGOLINFO_API_KEY