Pangolinfo Amazon Scraper: Products + Keywords + Reviews + Categories
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you provide the email/password fallback, the agent environment will contain Pangolinfo account login credentials.
The skill uses Pangolinfo account credentials or an API key. This is purpose-aligned for the service, but email/password use is more sensitive than an API key.
Set PANGOLINFO_API_KEY (recommended). OR set PANGOLINFO_EMAIL + PANGOLINFO_PASSWORD to auto-fetch a key.
Prefer using PANGOLINFO_API_KEY. Only provide PANGOLINFO_EMAIL and PANGOLINFO_PASSWORD if you specifically need automatic key retrieval.
A cached permanent API key could be reused by later runs on the same machine.
The artifacts disclose an optional persistent local credential cache for the Pangolinfo API key.
Optional caching (user must opt in): ... --cache-key ... This saves the key to ~/.pangolinfo_api_key (mode 0600)
Use caching only on a trusted personal machine, and delete ~/.pangolinfo_api_key if you no longer want the key stored locally.
Large or repeated scraping requests may spend account credits.
The skill's API calls can consume Pangolinfo credits, especially review-page requests.
Review page (`--mode review`) | **5 per page** ... Credits are charged **only on success**
Set clear limits for pages, categories, sellers, or review scraping before asking an agent to run broad searches.
Your ASINs, keywords, seller IDs, category IDs, and review-scraping requests may be visible to the Pangolinfo service.
The included client sends requests to Pangolinfo's cloud API endpoint.
API_BASE = "https://scrapeapi.pangolinfo.com"
Avoid sending product research or business-sensitive queries unless you are comfortable sharing them with Pangolinfo.