Amazon Ppc Campaign
v0.1.0Amazon PPC campaign builder and optimizer for sellers. Two modes: (A) Build — design a complete campaign structure from scratch with keyword groupings, bid c...
⭐ 0· 88·0 current·0 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to build and optimize Amazon PPC campaigns and includes a small scraper (scripts/fetch-competitor.sh) to extract product metadata from Amazon pages — this is consistent with its stated purpose (competitor keyword extraction). The references to related amazon-* skills are plausible integrations.
Instruction Scope
SKILL.md instructs the agent to run the bundled fetch-competitor.sh when an ASIN is provided and to use web_search when no ASIN is available — both are within scope. Note: the doc claims the script "handles Amazon's anti-bot protections" though the script only uses a common User-Agent, compression and timeout; this is a functional (and possibly TOS/anti-scraping) claim rather than hidden behavior. The skill asks users to paste CSV search-term reports (expected), which could contain sensitive commercial data; instructions do not attempt to read unrelated local files or environment variables.
Install Mechanism
There is no install spec in the registry (instruction-only skill). SKILL.md shows an npx command to add a package from a GitHub repo — that is documentation for installing a larger npm-hosted skill bundle, but the registry entry itself ships only the SKILL.md and one script. No remote downloads or extract steps are included in the provided files.
Credentials
The skill declares no required environment variables or credentials and the instructions do not request secret tokens. The included script performs unauthenticated HTTP fetches of public Amazon pages — no credentials are needed or requested.
Persistence & Privilege
The skill is not always-enabled and does not request persistent privileges or modify other skills/configs. Model invocation is allowed (normal default) but the skill does not request elevated or system-level access.
Assessment
This skill appears to do what it says: it analyzes PPC data and can scrape public Amazon product pages with a small curl script. Before installing, consider: (1) scraping risk — scraping may violate Amazon's terms and can be brittle; the script uses a simple User-Agent trick (not a guaranteed anti-bot bypass); (2) privacy of pasted data — any CSV or report you paste may include sensitive sales/cost info, so avoid sharing secrets; (3) the README suggests using npx to install a larger GitHub package — review that repository before running installer code; (4) if you run the fetch script on your machine, do it in a controlled environment (no secret env vars) and be aware it makes outbound HTTP requests to amazon domains. If you want stronger assurance, ask the skill author for an explicit install manifest and for confirmation they won't add remote downloads or require credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97a4nxszhfx6awmp76we0tfcs83e2xd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.