Tariff Calculator Amazon
v0.1.0Universal tariff calculator for Amazon sellers. Calculate import duties, landed costs, and VAT/GST for any trade route. Supports CN→US, CN→EU, US→EU, EU→US,...
⭐ 0· 87·0 current·0 all-time
byHenk Nie@phheng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (tariff/landed-cost calculator for Amazon sellers) matches the provided artifacts: two Python scripts implement HS lookup and cost calculations, and SKILL.md documents the same features. Required env vars, binaries, and config paths are empty which is consistent with a local calculation tool.
Instruction Scope
Runtime instructions are limited to running the included Python scripts with JSON parameters or textual queries; the SKILL.md does not instruct the agent to read unrelated system files or environment variables. Note: SKILL.md also shows an 'npx skills add nexscope-ai/eCommerce-Skills' install command (an external package fetch) — that step would pull code outside the included files if executed and is not necessary to run the bundled scripts directly.
Install Mechanism
There is no formal install spec in the registry (instruction-only skill), which is low-risk. However, the README suggests using an npx command that would fetch an external package (nexscope-ai/eCommerce-Skills). If you follow that npx step you will execute code from npm (or an npx-resolved source) outside this skill bundle — review that package before running it. The skill bundle itself contains only local Python scripts (no remote downloads or installers declared).
Credentials
The skill requests no environment variables, no credentials, and the scripts don't import networking libraries in visible sections. This is proportionate for a calculator. There are no obvious requests for unrelated secrets or system config.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not declare any elevated persistence or modification of other skills. Nothing in the provided files indicates it writes to or changes other skill configurations.
Assessment
This skill appears to be what it claims: a local tariff and HS-lookup calculator implemented in Python without credential requirements. Before installing or running: 1) Inspect the full, untruncated source files (the listing provided here was truncated) to confirm there are no hidden network calls or execs. 2) Avoid blindly running the SKILL.md's npx install command unless you trust and have inspected the upstream npm package it would fetch — that command would pull external code not included in this bundle. 3) You can run the included scripts directly with python (e.g., python3 scripts/calculator.py) to avoid fetching external packages. 4) Remember tariff rates here are hard-coded approximations; verify rates for legal/compliance decisions. If you want, I can search the full files for any network, subprocess, or suspicious code patterns if you paste the untruncated contents.Like a lobster shell, security has layers — review code before you run it.
latestvk97czasceezaw8e1ej0zwzh0fh83frr7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.