Amazon
v1.0.1Navigate Amazon for buying, selling, and affiliating using price tracking, listing optimization, deal analysis, and affiliate link management.
⭐ 5· 1.9k·13 current·15 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Amazon buyer/seller/affiliate workflows) match the content of SKILL.md and the included docs (buying, selling, pricing, affiliates, security, legal). There are no declared binaries or unrelated environment variables that don't belong to Amazon workflows.
Instruction Scope
All runtime instructions focus on Amazon-related tasks (search, price tracking, listing optimization, affiliate link generation). Some actions describe account operations (finding order history, reorders, placing orders). The skill repeatedly instructs human confirmation and respecting ToS, which limits scope. Verify any runtime agent implementation enforces explicit human approval before purchases or changes to payment methods.
Install Mechanism
No install spec and no code files — this is instruction-only. That minimizes write-to-disk risk. There are no download URLs or third-party package installs to evaluate.
Credentials
The skill declares no required env vars or primary credential, which is consistent with being an instruction-only guide. Practically, many features (SP-API, Product Advertising API, seller operations) require Amazon API credentials or an authenticated session; the docs correctly advise using official APIs and secure credential storage. Consider how the agent will obtain and store those credentials (prefer OS keychain/secrets manager, do not store passwords in plaintext).
Persistence & Privilege
The skill does not request always: true or any elevated persistent privileges. Default autonomous invocation is allowed (normal), but the skill's docs emphasize human confirmations for sensitive actions; ensure implementations honor that to limit autonomous high-risk actions.
Assessment
This is an instruction-only Amazon assistant; the files and runtime instructions are coherent with the stated purpose. Before installing or enabling it, confirm how the agent will obtain and store any Amazon credentials: prefer official APIs (SP-API/Product Advertising API) and OS keychain or secrets manager, never store passwords in plaintext, and require explicit human confirmation before placing purchases, changing payment methods, or making account-level changes. If you plan to use affiliate features, keep disclosures visible and follow Associates policy (and avoid putting links in email). If you want higher assurance, ask the skill author how authentication is handled at runtime (where session tokens live, whether the agent ever stores them, and how human approval is implemented).Like a lobster shell, security has layers — review code before you run it.
latestvk97aar5nxy3zhb3sgx15381w258157ph
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📦 Clawdis
OSLinux · macOS · Windows