Real Skill packageSource verifiedClawHub registry

amazon-shopper

Amazon shopping that ends in a decision, not a page of links. It sweeps a dozen query phrasings instead of trusting one keyword, decodes the spec markings a listing hides (memory-card A2/V30 classes, active-ingredient concentration), and ranks on the metric that actually decides the buy — €/kg of active, €/GB, €/kg of protein — so the cheapest sticker price stops winning by default. Availability is a hard gate: a listing that still renders is not a listing you can buy. It reads amazon.es ANONYMOUSLY — there is no…

Identity and source

Publisher attributionOscar Serraregistry owner unverified by skillvetai

Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 56% rule confidence

Package forminstruction with code57 recorded files

Canonical sourceClawHub registryclawhub:globalcaos:tinker-amazon-shopper

Open canonical source ↗

Platform declarations

These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.

OpenClawnative officialProvenance: registry distribution

Independent structural checks

These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.

Claude Codeissues found

Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/9/2026.claude/skills/amazon-shopper

1 structural issue

error: description exceeds the 1,024-character Agent Skills limit. SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenAI Codexissues found

Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/9/2026.agents/skills/amazon-shopper

1 structural issue

error: description exceeds the 1,024-character Agent Skills limit. SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

OpenClawissues found

Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/9/2026skills/amazon-shopper

1 structural issue

error: description exceeds the 1,024-character Agent Skills limit. SKILL.md

Runtime, accounts, dependencies, permissions, network behavior and task quality remain untested.

Installation and inspection

This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.

clawhub install @globalcaos/tinker-amazon-shopper

clawhub inspect @globalcaos/tinker-amazon-shopper --version 1.2.1

Security evidence

SkillVetAI static result: high signal

This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.

Status: completed
Coverage: partial text content
Files: 40 / 57 inspected as text
Checked: 9/9/2026, 4:42:48 PM
Scanner: 0.1.3
Policy: 1.0.3

4 automated findings

highInstructions or code access sensitive credential locationsSKILL.md:81 · confidence 85%keychain entry to read

highEncoded content is decoded and executedscripts/extract-detail.mjs:7 · confidence 90%fromCharCode

highEncoded content is decoded and executedscripts/extract-search.mjs:8 · confidence 90%fromCharCode

highEncoded content is decoded and executedscripts/store.mjs:89 · confidence 90%base64

4 High/Critical review queue entries

STATIC_SENSITIVE_CREDENTIAL_ACCESSpending

STATIC_OBFUSCATED_EXECUTIONpending

Open human review queue →

7 inferred permission indicators

shell execution — automatically inferred
network access — automatically inferred
filesystem read — automatically inferred
filesystem write — automatically inferred
credential access — automatically inferred
browser control — automatically inferred
external write action — automatically inferred

9 dependency and API indicators

api: api.apify.com
api: console.apify.com
api: docs.aws.amazon.com
api: duckduckgo.com
api: evil.example
api: github.com
api: m.media-amazon.com
api: webservices.amazon.com
api: www.amazon.es

External clawhub result: suspicious

This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.

Evidence checked: 9/9/2026, 9:48:46 AM
Release binding: Matches this record

skillspector: suspicious
llm: suspicious

Recorded files

The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.

Package content hashsha256:5688e457512c8229395a85cae730975153dab7db11824fc451b5d5825b777117

Show up to 30 recorded paths

adapters/AmazonAdapter.mjs
adapters/registry.mjs
adapters/StoreAdapter.mjs
bin/amazon-shopper
scripts/apify.mjs
scripts/brand-concentrations.mjs
scripts/categorize.mjs
scripts/creators-api.mjs
scripts/detect.mjs
scripts/dev-capture-fixtures.mjs
scripts/extract-detail.mjs
scripts/extract-search.mjs
scripts/fast-search.mjs
scripts/fetch.mjs
scripts/image-hash.mjs
scripts/image-spec.mjs
scripts/llm.mjs
scripts/memcard-spec.mjs
scripts/rank.mjs
scripts/research.mjs
scripts/sdcard-chart.mjs
scripts/sdcard-spec.mjs
scripts/shopper.mjs
scripts/store.mjs
scripts/title-spec.mjs
scripts/url-guard.mjs
skill-card.md
SKILL.md
tests/adapters/AmazonAdapter.test.mjs
tests/adapters/registry.test.mjs

Source changelog

Anonymous amazon.es only. Cookie capture and other-store scrapers removed from the zip. Actor id no longer configurable.

Release security diff

mediumCompared fixed releases 1.2.0 and 1.2.1; 0 finding and 0 permission indicators were added.

Both fixed releases were scanned under the current scanner and policy, so finding, permission and dependency changes are available.

Change reasons and limitations

finding surface changed
dependency surface changed
file surface changed
content hash changed

Observed release history

These older immutable releases were observed by prior successful syncs. They remain recorded when a newer release becomes current.

1.2.09/8/2026sha256:dcf56448ce4db37903348f5a67308687f50f7e007e5fb74279f6fff3c3a64370