Apiclaw Analysis
Security checks across malware telemetry and agentic risk
Overview
This skill appears purpose-aligned for Amazon product research, but it requires an APIClaw key and may make multiple API calls during full analyses.
Install this only if you are comfortable sending Amazon product, market, ASIN, and review-analysis queries to APIClaw using your API key. Prefer environment-variable credential storage and watch API credit usage during full analyses.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A full product analysis may use more API credits than a single lookup.
The skill directs the agent to make additional chained API calls in full-analysis workflows. This is purpose-aligned and bounded, but it can consume API quota without a separate confirmation step for each call.
When `products` or `competitors` returns ASINs in Full-mode analysis, **automatically call `product --asin` for the top 3-5 most relevant ASINs**
Use full mode intentionally, review the API usage information in outputs, and ask the agent to limit calls if you want to conserve credits.
Your APIClaw key may be stored on disk and used to make requests that consume your APIClaw account quota.
The skill requires an API credential and may persist it locally in config.json. The endpoint scope is clearly disclosed and matches the skill purpose.
- Required: `APICLAW_API_KEY` - Scope: used only for `https://api.apiclaw.io` - Resolution order: ... **Config file** `config.json` ... When user provides a Key, write it to `config.json`.
Prefer setting APICLAW_API_KEY as an environment variable; if you use config.json, protect the file, do not commit it, and rotate the key if it is exposed.