ClawHub

Amazon Sales Estimator

v0.1.0

Amazon sales volume estimator for sellers and product researchers. Estimate monthly sales and revenue from BSR (Best Seller Rank), ASIN, or keyword. Three mo...

⭐ 0· 86·0 current·0 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (estimate sales from BSR/ASIN/keyword) matches the runtime instructions: use web_fetch to pull product/search pages, extract BSR/price/category, apply BSR-to-sales formulas, and compute revenue. No unrelated credentials, binaries, or system paths are requested.
ℹ
Instruction Scope
Instructions are focused on fetching Amazon pages and extracting product data, which is within the stated purpose. However the guidance allows automated fetching (ASIN Lookup and Keyword Market Analysis) without rate limits or safeguards, which could enable high-volume scraping. The SKILL.md does not instruct reading local files or secrets.
ℹ
Install Mechanism
There is no formal install spec in the registry metadata (instruction-only). The SKILL.md includes an example 'npx skills add nexscope-ai/Amazon-Skills' command which, if followed, would pull and run remote code (npm / GitHub). Because that external package is not declared in the registry install spec, the instruction to run npx is optional but potentially risky — inspect the package source before executing.
✓
Credentials
The skill requires no environment variables, credentials, or config paths. That is proportionate to a scraper/estimation tool that uses public Amazon pages and local heuristics.
✓
Persistence & Privilege
Metadata flags indicate default behavior (always: false, agent invocation allowed). The skill does not request persistent privileges or modification of other skills or system-wide settings.
Assessment
This skill appears to do what it says (scrape Amazon product/search pages and apply heuristic BSR→sales formulas) and does not ask for credentials. Before using or installing: - If you run the provided 'npx skills add …' command, inspect the remote package source (npm or GitHub) first — that command will download and run third-party code not declared in the registry metadata. Run it only from sources you trust. - Be aware the skill relies on scraping Amazon pages (web_fetch). Bulk or automated requests can trigger rate limits, IP blocks, or violate Amazon's terms of service — avoid high-volume scraping and add delays/limits if you automate. - The sales estimates are heuristic approximations (category multipliers, BSR conversions). Treat estimates as rough guidance, not authoritative numbers. - If you want stronger safety, use the instruction-only behavior (no npx install) and test with a few queries; if an installation is required, review the package code and run in a sandboxed environment. If you want, I can: (1) summarize the remaining truncated parts of SKILL.md you provided, (2) draft questions to ask the skill author/owner, or (3) help review the remote package repository if you provide its URL.

Like a lobster shell, security has layers — review code before you run it.

latestvk97686yp1j7gfwgnpdrgway65h83ff56

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments