This skill serves as an advanced Amazon Listing Optimization & Copywriting Engine (powered by Pangolinfo API). It is strictly designed to craft high-conversi...
Security Analysis
high confidenceThe skill's code, runtime instructions, and required credentials are consistent with an Amazon listing optimization toolkit that uses the Pangolinfo API; nothing in the bundle appears to request unrelated access or perform covert exfiltration.
Name/description (Amazon listing optimization, VOC scraping, WIPO checks) match the included scripts (amazon_scraper.py, ai_serp.py, amazon_niche.py, wipo.py) and the declared Pangolinfo credentials. The requested environment variables (PANGOLINFO_API_KEY or email+password) are appropriate for the upstream service.
SKILL.md and the scripts restrict actions to data collection via Pangolinfo endpoints and scraping SERP/Amazon/WIPO as documented. The SOP mandates default US marketplace/zip and silent execution of a 5-step workflow — this is a design choice that affects transparency (the agent will not surface raw JSON by default). The instructions and scripts only reference declared env vars and an optional cache file (~/.pangolinfo_api_key).
No install spec or external download URLs are used. The bundle contains zero-dependency Python scripts and a shell self-test; nothing is pulled from unknown hosts during installation.
The skill requires Pangolinfo credentials only (API key or email/password). This is proportionate, but supplying email+password is sensitive; the scripts offer an optional caching mechanism that can write an API token to ~/.pangolinfo_api_key if explicitly enabled.
always is false and the skill is user-invocable. The skill does not request elevated platform privileges or modify other skills. Optional token caching writes only to the invoking user's home directory when explicitly enabled.
Guidance
This skill appears to do what it claims: it calls Pangolinfo APIs to scrape Amazon/Google SERP/external social sources and run WIPO checks. Before installing: (1) prefer providing an API key rather than your Pangolinfo account password; (2) avoid enabling the optional cache unless you want a token file at ~/.pangolinfo_api_key (the default is not to cache); (3) be aware that network requests and scraped data are sent to scrapeapi.pangolinfo.com (the stated backend); (4) the skill’s SOP suppresses raw JSON output by default, so expect summarized results rather than raw API payloads; (5) if you have privacy or billing concerns, create a separate Pangolinfo account or API key with limited credits. If you want deeper assurance, verify the Pangolinfo domain and review its privacy/terms or run the bundled self-test locally with non-sensitive credentials first.
Latest Release
v2.0.0
- Minor correction in negative boundaries: niche-finding route changed from `pangolinfo-amazon-product-discovery` to `pangolinfo-amazon-product-explorer`. - Added `emoji` and `os` fields under metadata to improve compatibility and display. - No logic or script functionality changes; all bundled APIs and system prompts remain unchanged. - Updated tags format for consistency. - Version remains at 2.0.0.
More by @pangolinfo
Pangolinfo AI SERP: AI Mode Output + AI Overviews
5 stars
Pangolinfo Amazon Scraper: Products + Keywords + Reviews + Categories
4 stars
Pangolinfo Amazon Niche Data (Niche Intelligence & Category)
1 stars
pangolinfo-amazon-daily-competitor-radar
0 stars
pangolinfo-amazon-product-explorer
0 stars
self-improving-agent
@pskoett · 1,456 stars
Published by @pangolinfo on ClawHub
