Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Amazon Reviews

v1.0.1

按ASIN获取并分析亚马逊商品评论,支持15个站点(含美国站),按星级筛选评论。当用户提到亚马逊评论、美国站评论、商品评价、买家投诉、差评、好评、星级评分、评论分析、评论情感、产品改良建议、Vine评论、已验证购买评论、竞品评论研究、Amazon reviews, US reviews, Amazon.com r...

0· 113·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for linkfox-ai/linkfox-amazon-reviews.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Amazon Reviews" (linkfox-ai/linkfox-amazon-reviews) from ClawHub.
Skill page: https://clawhub.ai/linkfox-ai/linkfox-amazon-reviews
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install linkfox-amazon-reviews

ClawHub CLI

Package manager switcher

npx clawhub@latest install linkfox-amazon-reviews
Security Scan
Capability signals
CryptoCan make purchasesRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill fetches and analyzes Amazon reviews via backend APIs (tool-gateway.linkfox.com / skill-api.linkfox.com), which is coherent with the description. However, the code and API docs require an API key (LINKFOXAGENT_API_KEY) to call those endpoints, while the skill registry metadata declares no required environment variables or primary credential — a clear mismatch.
Instruction Scope
SKILL.md and the example scripts limit behavior to fetching and formatting Amazon reviews and calling the documented endpoints. They do not attempt to read arbitrary system files or unrelated credentials. The instructions do route US vs non-US marketplaces to different scripts and recommend grouping/summary rules, which is within scope.
Install Mechanism
No install spec (instruction-only plus small Python scripts). The python scripts use only standard libraries and make HTTPS POST requests; nothing is downloaded from unknown URLs during install. This is low install risk.
!
Credentials
The scripts and reference docs require LINKFOXAGENT_API_KEY (read from environment) to authenticate to the LinkFox API. The registry metadata, however, lists no required env vars or primary credential. Requiring an API key for an external service is proportionate to the task, but the omission from metadata is a red flag and prevents automatic vetting of required secrets.
Persistence & Privilege
No elevated privileges requested. always is false; the skill does not request persistent/always-on presence or modify other skills or system-wide settings.
What to consider before installing
This skill contacts external LinkFox endpoints and requires an API key (LINKFOXAGENT_API_KEY) to function, but that credential is not declared in the skill metadata — a mismatch you should not ignore. Before installing: (1) Confirm you trust the LinkFox service and the registry owner (owner ID present but homepage/source unknown). (2) Do not provide sensitive org credentials; the API key grants a third party the ability to receive requests you make through the skill (ASINs, any text sent). (3) Verify where to obtain the API key (the scripts point to a Feishu wiki) and review LinkFox's privacy/security policy. (4) If you cannot verify the endpoint/operator, decline installation or require the maintainer to correct the manifest to list LINKFOXAGENT_API_KEY as a required credential and provide publisher/legal info. If you want, I can draft questions to ask the publisher (e.g., data retention, encryption, intended use of submitted review text, and why the env var is missing from metadata).

Like a lobster shell, security has layers — review code before you run it.

latestvk9788c28c017abvd7qx1mrecb1857m0p
113downloads
0stars
2versions
Updated 1w ago
v1.0.1
MIT-0

Amazon Product Reviews

Fetch and analyze Amazon product reviews to help sellers extract actionable insights from customer feedback.

Core Concepts

This tool retrieves real customer reviews for a given Amazon ASIN across 15 marketplaces. You can control how many reviews to fetch per star rating (1-5 stars, up to 100 each), sort by recency or helpfulness, and apply various filters. Only one ASIN per request; for multiple ASINs, make separate calls.

API Routing

US and non-US marketplaces use different backend endpoints. Route by marketplace:

  • USscripts/amazon_us_reviews.py, pass marketplace: "US". See references/api_us.md
  • Othersscripts/amazon_reviews.py, pass domainCode: "<code>". See references/api.md

Parameter Guide

ParameterTypeRequiredScopeDescriptionDefault
asinstringYesAllAmazon product ASIN-
star1NumintegerNoAll1-star reviews to fetch (0-100)Non-US: 10, US: 0
star2NumintegerNoAll2-star reviews to fetch (0-100)Non-US: 10, US: 0
star3NumintegerNoAll3-star reviews to fetch (0-100)Non-US: 10, US: 0
star4NumintegerNoAll4-star reviews to fetch (0-100)Non-US: 10, US: 0
star5NumintegerNoAll5-star reviews to fetch (0-100)Non-US: 10, US: 0
sortBystringNoAllrecent (newest) or helpful (most helpful)recent
formatTypestringNoAllcurrent_format or all_formatscurrent_format
domainCodestringNoNon-USMarketplace code (see Supported Marketplaces)ca
filterByKeywordstringNoNon-USFilter reviews by keyword (max 1000 chars)-
reviewerTypestringNoNon-USall_reviews or avp_only_reviews (verified only)all_reviews
mediaTypestringNoNon-USall_contents or media_reviews_onlyall_contents
marketplacestringNoUSFixed value USUS
allStarsNumintegerNoUSReviews across all stars (0-100); active when star1-5Num are all 010
positiveNumintegerNoUS4-5 star positive reviews (0-100)0
criticalNumintegerNoUS1-3 star critical reviews (0-100)0

Supported Marketplaces

MarketplaceCode
United StatesUS
Canadaca
United Kingdomco.uk
Germanyde
Francefr
Italyit
Spaines
Japanco.jp
Indiain
Australiacom.au
Brazilcom.br
Mexicocom.mx
Netherlandsnl
Swedense
United Arab Emiratesae

US uses the marketplace parameter; all others use domainCode. Always confirm the user's intended marketplace.

Usage Examples

1. Fetch US reviews — balanced snapshot

{"asin": "B08N5WRWNW", "marketplace": "US", "allStarsNum": 20, "sortBy": "recent"}

2. Fetch negative reviews with keyword filter (Germany)

{"asin": "B08N5WRWNW", "domainCode": "de", "star1Num": 30, "star2Num": 30, "filterByKeyword": "quality", "reviewerType": "avp_only_reviews"}

3. Fetch 5-star reviews with media (Japan)

{"asin": "B08N5WRWNW", "domainCode": "co.jp", "star5Num": 50, "star1Num": 0, "star2Num": 0, "star3Num": 0, "star4Num": 0, "sortBy": "helpful", "mediaType": "media_reviews_only"}

Display Rules

  1. Present data clearly: Show reviews grouped by star rating with key fields: rating, title, text, date, verified status, helpful count.
  2. Summarize when appropriate: For many reviews, provide a theme/pain-point summary before listing individuals.
  3. Highlight actionable insights: Call out recurring complaints in negative reviews; note praised features in positive reviews.
  4. Vine and verified labels: Clearly indicate Vine Voice and verified purchase status.
  5. Media indicators: Note when reviews include images or videos.
  6. Response normalization: US reviews return rating as full text (e.g., "5.0 out of 5 stars") and numberOfHelpful as string — extract numeric values for consistent display. US reviews may also include attributes (color, size, etc.) — display them to show which variant was reviewed.
  7. Error handling: When a query fails, explain the reason based on the response message and suggest adjusting parameters.
  8. Single ASIN limitation: If the user asks about multiple ASINs, make separate requests for each.

Important Limitations

  • One ASIN per request: Only a single ASIN can be queried at a time.
  • Per-star cap: Each star rating returns max 100 reviews per request.
  • Parameter scope: filterByKeyword, reviewerType, mediaType are only available for non-US marketplaces; allStarsNum, positiveNum, criticalNum are only available for the US marketplace.
  • No historical snapshots: Reviews are fetched in real-time.
  • Review text language: Reviews are returned in their original language as posted.

User Expression & Scenario Quick Reference

Applicable — Tasks involving Amazon product reviews:

User SaysScenario
"Show me the reviews for this ASIN"Direct review lookup
"Get US reviews for B08N5WRWNW"Marketplace-specific lookup
"What are customers complaining about"Negative review analysis
"Get me all the 1-star reviews"Star-filtered retrieval
"Any common issues in the bad reviews"Pain point mining
"What do people like about this product"Positive review analysis
"Find reviews mentioning 'battery'"Keyword-filtered reviews (non-US)
"Show me reviews with photos"Media-filtered reviews (non-US)
"Verified purchase reviews only"Reviewer-type filtering (non-US)
"Help me analyze competitor reviews"Competitor review research
"Product improvement suggestions from reviews"Actionable insight extraction

Not applicable — Needs beyond product review data:

  • ABA search term data / keyword research (use ABA Data Explorer instead)
  • Sales estimation or revenue analysis
  • Listing copywriting or A+ content creation
  • Advertising / PPC strategy
  • Pricing strategy or profit margin calculations

Boundary judgment: If "product research" or "competitor analysis" boils down to reading customer reviews for specific ASINs, this skill applies. If it involves search volume, keyword rankings, sales estimates, or market sizing, it does not.

Feedback:

Auto-detect and report feedback via the Feedback API when any of the following apply:

  1. The functionality or purpose described in this skill does not match actual behavior
  2. The skill's results do not match the user's intent
  3. The user expresses dissatisfaction or praise about this skill
  4. Anything you believe could be improved

Call the feedback API as specified in the references. Do not interrupt the user's flow.


For more high-quality, professional cross-border e-commerce skills, visit LinkFox Skills.

Comments

Loading comments...