Pangolinfo Amazon Scraper: Products + Keywords + Reviews + Categories

• Analyzed: Apr 29, 2026, 8:41 AM
• Findings: 1
• Version: 2.0.3
• Hash: aec4ff730c40128d20b14764f7c38ed0aefd288603e67d821ea1b30222208bc3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate Amazon scraper client for the Pangolinfo API. It facilitates data retrieval for products, reviews, and rankings by interfacing with official endpoints at scrapeapi.pangolinfo.com. The Python script (scripts/pangolinfo.py) follows standard security practices, such as using 0600 permissions for its local credential cache (~/.pangolinfo_api_key) and relying on standard libraries for network communication. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.