Skills zach-sif-cvr-threshold-analyzer
📦

zach-sif-cvr-threshold-analyzer

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access🌐 Network access

Analyze CVR Risk Lines for Amazon Ranking

Offsite traffic can lower CVR before organic rank movement appears. This skill aligns business reports with SIF rank data and outputs practical CVR warning lines.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "zach-sif-cvr-threshold-analyzer" from https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer.md and its manifest at https://skillstore.io/api/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zach22-1999-zach-sif-cvr-threshold-analyzer.md Signed manifest GET /api/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/manifest Signed lockfile GET /api/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/lockfile

Test it

Using "zach-sif-cvr-threshold-analyzer". Sample ASIN business report plus SIF daily keyword cache.

Expected outcome:

  • A Markdown report with observation, danger, and advertising CVR confirmation lines.
  • A daily CSV panel that aligns sessions, CVR, and rank movement events.
  • A candidate-threshold CSV showing hit rate, recall, and lift.

Using "zach-sif-cvr-threshold-analyzer". A report with missing SIF days and fewer than 21 days of history.

Expected outcome:

The report is generated with concerns about missing SIF dates and weak sample size.

Using "zach-sif-cvr-threshold-analyzer". A business report where natural CVR includes negative adjustment days.

Expected outcome:

The analysis flags those dates and avoids using natural CVR as the main monitoring metric.

Security Audit

High Risk
v4 • 7/8/2026 Open versioned report

Most static findings are false positives from Markdown backticks, relative README links, XML namespace strings, test temp directories, and normal XML parsing. The confirmed risks are unbounded local XLSX archive parsing and unsanitized output filename components that may allow unintended file writes. No prompt injection attempt was found in the reviewed files.

8
Files scanned
1,980
Lines analyzed
3
Review items
0
False positives ignored

Confirmed security concerns (1)

High
scripts/analyze_cvr_rank_threshold.py:95-102scripts/analyze_cvr_rank_threshold.py:1117-1131
Unsanitized Output Path Components
The analyzer builds output file paths from user-controlled analysis date, site, and ASIN values without strict validation. Absolute paths or path separators in those values could write output files outside the intended directory.
The CLI accepts raw string values and write_outputs concatenates them into Path names before write_text calls. This is a clear local file-write risk if an agent or user supplies unsafe path components.
Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
scripts/analyze_cvr_rank_threshold.py:17
Python archive libraries
import zipfile
The script imports zipfile to process user-provided XLSX or XLSM files. Later code opens workbook archives without explicit size limits, so crafted archives could cause resource exhaustion.
Medium
scripts/analyze_cvr_rank_threshold.py:260
Python archive libraries
with zipfile.ZipFile(path) as archive:
This opens a user-provided workbook as a zip archive and reads XML entries into memory. It does not extract files, but a maliciously large workbook could still exhaust memory.
Medium
scripts/analyze_cvr_rank_threshold.py:291
Python archive libraries
def read_shared_strings(archive: zipfile.ZipFile) -> list[str]:
This helper consumes the opened ZipFile to read sharedStrings.xml. The risk is bounded to local parsing, but there are no explicit compressed or uncompressed size checks.

Risk Factors

⚙️ External commands (31)
README.md:27 README.md:127-130 README.md:130-134 scripts/analyze_cvr_rank_threshold.py:1018 scripts/analyze_cvr_rank_threshold.py:1026 scripts/analyze_cvr_rank_threshold.py:1034 scripts/analyze_cvr_rank_threshold.py:1088 scripts/analyze_cvr_rank_threshold.py:1089 scripts/analyze_cvr_rank_threshold.py:1090 scripts/analyze_cvr_rank_threshold.py:1091 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:22 SKILL.md:23 SKILL.md:37 SKILL.md:40 SKILL.md:41 SKILL.md:44 SKILL.md:51 SKILL.md:52 SKILL.md:60-78 SKILL.md:78-84 SKILL.md:84-94 SKILL.md:94-122 SKILL.md:122-124 SKILL.md:124-128 SKILL.md:128 SKILL.md:129 SKILL.md:130 SKILL.md:131
📁 Filesystem access (14)
README.md:31 README.md:140 README.md:144 scripts/analyze_cvr_rank_threshold.py:94 scripts/analyze_cvr_rank_threshold.py:17 scripts/analyze_cvr_rank_threshold.py:260 scripts/analyze_cvr_rank_threshold.py:291 tests/test_analyze_cvr_rank_threshold.py:5 tests/test_analyze_cvr_rank_threshold.py:38 tests/test_analyze_cvr_rank_threshold.py:47 tests/test_analyze_cvr_rank_threshold.py:104 tests/test_analyze_cvr_rank_threshold.py:111 tests/test_analyze_cvr_rank_threshold.py:7 tests/test_analyze_cvr_rank_threshold.py:141
🌐 Network access (1)
tests/test_analyze_cvr_rank_threshold.py:137
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/security.svg)](https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zach22-1999-zach-sif-cvr-threshold-analyzer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

zach22-1999. (2026). zach-sif-cvr-threshold-analyzer security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/audits/4

BibTeX citation

@techreport{zach22-1999-zach22-1999-zach-sif-cvr-threshold-analyzer-2026, author = {zach22-1999}, title = {zach-sif-cvr-threshold-analyzer security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "zach-sif-cvr-threshold-analyzer security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "zach22-1999" date-released: "2026-07-08" url: "https://skillstore.io/skills/zach22-1999-zach-sif-cvr-threshold-analyzer/audits/4" identifiers: - type: other value: "skillstore:zach22-1999-zach-sif-cvr-threshold-analyzer:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
77
Architecture
85
Maintainability
87
Content
67
Community
83
Spec Compliance

What You Can Build

Monitor Offsite Traffic Quality

Check whether offsite campaigns are lowering CVR before key organic ranks move.

Review Launch Risk Signals

Backtest launch-period CVR data against SIF keyword movement before changing traffic plans.

Prepare Rank Risk Reports

Create a daily panel, threshold candidates, and a written report for stakeholder review.

Try These Prompts

Run the Sample Analysis 
Use zach-sif-cvr-threshold-analyzer with the included sample files. Show the report path and the three CVR lines.
Analyze One ASIN 
Analyze my target ASIN with this business report and this SIF JSON cache. Use my launch date and core keywords.
Check Data Readiness 
Review my business report and SIF cache for missing dates, required fields, and small-sample risks before analysis.
Compare Threshold Options 
Compare the observation, danger, and ad CVR confirmation lines. Explain which line should guide daily monitoring.

Best Practices

  • Use one ASIN per run and confirm core keywords manually when possible.
  • Export a continuous daily window that covers pre-launch and launch periods.
  • Review threshold actions manually before changing budget, price, promotion, or listing content.

Avoid

  • Do not treat the output as an Amazon official ranking threshold.
  • Do not mix multiple ASINs in one business report analysis.
  • Do not continue when required fields or SIF dates are missing.

Frequently Asked Questions

Does this skill call a private SIF service?
No. It reads a local SIF JSON cache created by the user or their tooling.
Which report formats are supported?
The analyzer supports CSV, XLSX, and XLSM business reports with compatible daily ASIN fields.
What are the three CVR lines?
They are observation, danger, and advertising CVR confirmation lines for manual monitoring.
Can it change advertising budgets or listings?
No. It only produces analysis files and recommendations for human review.
How much data is needed?
The skill can run on small windows, but fewer than 21 days is marked as weak evidence.
Can Claude, Codex, or Claude Code use it?
Yes. The metadata lists Claude, Codex, and Claude Code as supported tools.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/zach22-1999/amazon-skills/tree/main/skills/zach-sif-cvr-threshold-analyzer

Ref

64ca8af0f54a325752f08bd54e52151061ea659a

Maintenance freshness

7/20/2026

Usage

3 downloads · 1 views

File structure

📁 examples/

📄 business-report-sample.csv

📄 sif-daily-keyword-sample.json

📁 references/

📄 input_schema.md

📄 threshold_method.md

📁 scripts/

📄 analyze_cvr_rank_threshold.py

📁 tests/

📄 test_analyze_cvr_rank_threshold.py

📄 README.md

📄 SKILL.md