Skills amazon-listing-competitor-analysis-skill
📦
amazon-listing-competitor-analysis-skill
Content revision r2 High Risk 🌐 Network access🔑 Env variables⚙️ External commands
Analyze Amazon Competitor Listings
Competitor listings contain useful signals, but manual analysis is slow and inconsistent. This skill extracts one ASIN and converts evidence into structured strategic opportunities.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "amazon-listing-competitor-analysis-skill" from https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-amazon-listing-competitor-analysis-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "amazon-listing-competitor-analysis-skill". Analyze one competitor ASIN and explain its strongest listing choices.
Expected outcome:
- Competitor snapshot: The report lists available brand, price, rating, review count, and ranking details.
- Content strategy: It explains the title formula, bullet priority, differentiation language, and available A+ modules.
- Buyer validation: It connects prominent claims with praise found in helpful reviews.
Using "amazon-listing-competitor-analysis-skill". Find keyword and visual gaps for a planned product launch.
Expected outcome:
- Keyword gaps: The report identifies relevant buyer language that is absent or weakly placed.
- Visual gaps: It notes missing use cases, comparisons, scale references, or proof formats.
- Opportunity map: It translates each supported gap into a distinct opening for the planned brand.
Using "amazon-listing-competitor-analysis-skill". Use reviews to identify product and offer opportunities.
Expected outcome:
The report groups recurring wishes and complaints, separates defect noise, and proposes supported variant, bundle, warranty, or service opportunities.
Security Audit
High Riskv6 • 7/23/2026 Open versioned report
The skill intentionally runs a local Python script that sends listing parameters and a BrowserAct API key to a fixed third-party API. Most static alerts are Markdown formatting or documentation false positives, but network access, credential handling, and the documented command are confirmed. The guidance also asks users to provide an API key directly to the agent, creating an avoidable credential exposure risk.
2
Files scanned
329
Lines analyzed
15
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Unsafe API Key Solicitation
The skill says to "ask and wait for the user to provide" the BrowserAct key, while the script says "Provide it to me." This encourages disclosure of a reusable credential in the conversation instead of secure local configuration.
Both files explicitly direct the user to provide the API key to the agent, so the unsafe disclosure guidance is unambiguous.
Capability review items (15)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Generic API/secret keys
def run_amazon_listing_competitor_analysis_task(api_key, asin, marketplace_url="https://www.amazon.c
The function accepts an API credential that is later placed in the outbound authorization header.
High
Generic API/secret keys
headers = {"Authorization": f"Bearer {api_key}"}
The BrowserAct API key is placed in a bearer authorization header and sent to the fixed third-party API.
High
Generic API/secret keys
api_key = os.getenv("BROWSERACT_API_KEY")
This line reads the BrowserAct API key from an environment variable, creating a real credential-handling boundary.
High
Generic API/secret keys
result = run_amazon_listing_competitor_analysis_task(api_key, asin, marketplace_url)
This call passes the credential into the function that uses it for authenticated BrowserAct requests.
High
Generic API/secret keys
metadata: {"openclaw":{"emoji":"🌐","requires":{"bins":["python"],"env":["BROWSERACT_API_KEY"]}}}
The metadata explicitly declares BROWSERACT_API_KEY as a required environment credential.
High
Generic API/secret keys
Before running, you must check the `BROWSERACT_API_KEY` environment variable. If it is not set, do n
The instructions require the agent to inspect the BrowserAct key environment variable and solicit the key when absent.
Medium
Ruby/shell backtick execution
```bash
This fenced Bash block instructs the agent to execute the bundled Python script with user-relevant arguments.
Low
Python HTTP libraries
res = requests.post(
This POST starts a BrowserAct workflow and transmits the ASIN, marketplace URL, and bearer credential to the fixed BrowserAct API.
Low
Python HTTP libraries
status_res = requests.get(
This GET polls the BrowserAct service with the task identifier and authorization header, so it is intentional external network access.
Low
Python HTTP libraries
task_info = requests.get(
This GET retrieves task output from the BrowserAct API with the authorization header.
Low
Hardcoded URL
API_BASE_URL = "https://api.browseract.com/v2/workflow"
The constant fixes all workflow requests to the external BrowserAct API domain.
Low
Hardcoded URL
def run_amazon_listing_competitor_analysis_task(api_key, asin, marketplace_url="https://www.amazon.c
The function defines an Amazon URL as a default external marketplace target and submits it in the BrowserAct workflow payload.
Low
Hardcoded URL
marketplace_url = sys.argv[2] if len(sys.argv) > 2 else "https://www.amazon.com/"
The default Amazon marketplace URL is assigned to a runtime parameter that is sent to the BrowserAct workflow.
Low
Python getenv function
api_key = os.getenv("BROWSERACT_API_KEY")
The script directly reads BROWSERACT_API_KEY from the process environment.
Low
getenv function call
api_key = os.getenv("BROWSERACT_API_KEY")
The getenv call performs real environment access for the BrowserAct credential.
Risk Factors
🌐 Network access (14)
scripts/amazon_listing_competitor_analysis.py:35 scripts/amazon_listing_competitor_analysis.py:62 scripts/amazon_listing_competitor_analysis.py:90 scripts/amazon_listing_competitor_analysis.py:15 scripts/amazon_listing_competitor_analysis.py:18 scripts/amazon_listing_competitor_analysis.py:48 scripts/amazon_listing_competitor_analysis.py:116 scripts/amazon_listing_competitor_analysis.py:122 SKILL.md:22 SKILL.md:36 SKILL.md:37 SKILL.md:43 SKILL.md:46 SKILL.md:71
🔑 Env variables (10)
scripts/amazon_listing_competitor_analysis.py:112 scripts/amazon_listing_competitor_analysis.py:112 scripts/amazon_listing_competitor_analysis.py:18 scripts/amazon_listing_competitor_analysis.py:23 scripts/amazon_listing_competitor_analysis.py:112 scripts/amazon_listing_competitor_analysis.py:113 scripts/amazon_listing_competitor_analysis.py:118 scripts/amazon_listing_competitor_analysis.py:124 SKILL.md:4 SKILL.md:20
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-amazon-listing-competitor-analysis-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/browser-act-amazon-listing-competitor-analysis-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
browser-act. (2026). amazon-listing-competitor-analysis-skill security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill/audits/6BibTeX citation
@techreport{browser-act-browser-act-amazon-listing-competitor-analysis-skill-2026,
author = {browser-act},
title = {amazon-listing-competitor-analysis-skill security audit report (audit version 6)},
institution = {Skillstore},
year = {2026},
number = {6},
url = {https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill/audits/6},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "amazon-listing-competitor-analysis-skill security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
- name: "browser-act"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/browser-act-amazon-listing-competitor-analysis-skill/audits/6"
identifiers:
- type: other
value: "skillstore:browser-act-amazon-listing-competitor-analysis-skill:audit:6"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 45
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Prepare a Product Launch
Identify positioning, feature, bundle, and proof opportunities before launching a competing product.
Benchmark Listing SEO
Map a leading competitor's keyword placement and uncover search intents that its listing weakly serves.
Mine Buyer Needs
Compare listing claims with review praise and complaints to shape research priorities.
Try These Prompts
Create a Listing Overview
Analyze ASIN [ASIN] on [Amazon marketplace URL]. Summarize the listing, its strongest content choices, and three evidence-based market gaps.
Audit Keyword Placement
Analyze ASIN [ASIN] on [marketplace URL]. Map keywords by title, early bullets, later bullets, description, and available A+ content.
Find Review-Driven Opportunities
Analyze ASIN [ASIN]. Compare buyer praise with listing claims, then identify recurring unmet needs from mixed and low-star reviews.
Build a Competitive Opportunity Map
Analyze ASIN [ASIN] against this product brief: [brief]. Prioritize positioning, search, creative proof, offer, and product opportunities by supporting evidence.
Best Practices
- Use the exact ASIN and regional Amazon marketplace for the listing under review.
- Treat extracted fields as the evidence base and label unavailable data clearly.
- Compare several separate reports before making high-impact product or positioning decisions.
Avoid
- Do not paste API keys into prompts or conversation messages.
- Do not invent traffic, conversion, keyword volume, or review evidence that the workflow did not return.
- Do not present opportunity points as direct edits to the competitor's listing.
Frequently Asked Questions
What input does the skill require?
Provide one Amazon ASIN. You can also provide the matching regional Amazon marketplace URL.
Does the skill require an API key?
Yes. Configure BROWSERACT_API_KEY locally through an environment variable or approved secret manager.
Can it analyze several competitors at once?
No. The bundled script processes one ASIN per run, but you can run separate analyses for comparison.
What information can the report cover?
It can cover listing content, keyword placement, visuals, seller details, available reviews, market gaps, and strategic opportunities.
How long can an analysis take?
The polling window is up to 15 minutes. Network conditions and BrowserAct task capacity can affect completion.
Does it provide verified sales or conversion data?
No. It only analyzes returned listing evidence and should not infer unavailable performance metrics.
Developer Details
Author
browser-actLicense
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
a39a91716eadede5f4cdefd78178fed4e837a128
Maintenance freshness
7/24/2026
Usage
5 downloads · 116 views
File structure