This skill helps users analyze Amazon competitor listings by ASIN and produce structured competitive intelligence plus strategic opportunity points for their...
Security Analysis
high confidenceThe skill's code, runtime instructions, and requested environment variable align with its stated purpose (scraping an Amazon listing via BrowserAct and producing an analysis); nothing in the package requests unrelated credentials or performs unexpected actions.
The skill claims to extract and analyze Amazon listings and requires only python and a BrowserAct API key (BROWSERACT_API_KEY). The included script calls BrowserAct APIs to run a browser extraction workflow (consistent with the stated purpose). No unrelated binaries or credentials are requested.
SKILL.md restricts actions to two phases: run BrowserAct extraction (Phase 1) and perform analysis (Phase 2) on the returned structured payload. Instructions only reference the declared env var and the provided script; they do not direct reading unrelated files, accessing other credentials, or sending data to unexpected endpoints.
There is no install spec (instruction-only), so nothing is downloaded or installed by the registry. The package includes a Python script that will run locally; that is proportionate for this task and poses low install risk.
Only BROWSERACT_API_KEY is required and justified because the script uses the BrowserAct API. No other secrets or unrelated environment variables are requested. The script obtains the key from the declared env var and does not attempt to read other environment values.
The skill does not request persistent/always-on privileges (always: false). It does not modify other skills or system-wide configs and runs only when invoked.
Guidance
The package appears internally consistent, but review these practical points before installing: 1) Trust & data flow: the script sends the ASIN and marketplace to BrowserAct (an external service). Ensure you trust BrowserAct and that sending the scraped listing data to that service complies with your policies and any terms of service. 2) Keep the API key secret: BROWSERACT_API_KEY is required — treat it like any other secret and do not paste it into chat or share it. 3) Output contents: the script prints the full task JSON (including review text and seller info). Be mindful if that output contains user-generated text or potential PII. 4) Rate limits & cost: errors related to concurrency or plan limits are handled by the script; confirm your BrowserAct plan to avoid surprise failures or charges. 5) Source provenance: owner and homepage are unknown. If you need higher assurance, run the included Python script in an isolated environment (local machine or isolated container) and inspect network calls, or obtain the BrowserAct template/owner info directly from BrowserAct. Overall, the skill is coherent for its stated purpose, but verify external service trust and credential handling before use.
Latest Release
v1.0.0
Amazon Listing Competitor Analysis Skill v1.0.0 - Initial release providing structured Amazon competitor listing analysis by ASIN. - Two-phase workflow: extracts listing data, then generates competitive insights and actionable opportunity points. - No hallucinations; grounded analyses relying solely on extracted product data. - Full support for error handling, API key checks, and concurrency limit guidance. - Highly cost-efficient, captcha- and geo-block-free data extraction workflow. - Typical use cases include listing teardown, keyword audit, unmet need mining, and conversion benchmarking.
Popular Skills
Published by @browseract-ai on ClawHub
