ecom-price-monitoring
Track and audit product prices across online marketplaces via SearchApi, with a local price archive and run-over-run diffs so a weekly run shows price changes over time. Google Shopping is the primary source (it already aggregates many merchants); Amazon, eBay, Walmart, and BestBuy are opt-in add...
Install this skill
or
83/100
Security score
The ecom-price-monitoring skill was audited on Aug 6, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 162
Command substitution pattern
SourceSKILL.md
| 160 | ```bash |
| 161 | F=".ecom-price-monitoring/$SLUG/$DATE-google_shopping.json" |
| 162 | TOKEN=$(jq -r '.shopping_results[0].product_token' "$F") |
| 163 | jq -c '.shopping_results[:10][] |
| 164 | | {product: .title, merchant: .seller, price: .extracted_price, link: .product_link, id: .product_token}' "$F" |
low line 213
Command substitution pattern
SourceSKILL.md
| 211 | |
| 212 | ```bash |
| 213 | NOW=$(date -u +%FT%TZ) |
| 214 | # Run AFTER the relevance filter; feed the filtered objects in. Column order |
| 215 | # matches prices.csv: captured_at,product,is_anchor,variant,source,merchant, |
medium line 154
Curl to non-GitHub URL
SourceSKILL.md
| 152 | ```bash |
| 153 | SLUG="sony-wh-1000xm5"; DATE=$(date +%F); mkdir -p ".ecom-price-monitoring/$SLUG" |
| 154 | curl -s "https://www.searchapi.io/api/v1/search?engine=google_shopping&q=Sony+WH-1000XM5&gl=us&hl=en&sort_by=price_low_to_high&api_key=$SEARCHAPI_API_KEY" \ |
| 155 | > ".ecom-price-monitoring/$SLUG/$DATE-google_shopping.json" |
| 156 | ``` |
medium line 172
Curl to non-GitHub URL
SourceSKILL.md
| 170 | - **curl:** |
| 171 | ```bash |
| 172 | curl -s "https://www.searchapi.io/api/v1/search?engine=google_product_offers&product_token=$TOKEN&gl=us&page=1&api_key=$SEARCHAPI_API_KEY" \ |
| 173 | > ".ecom-price-monitoring/$SLUG/$DATE-google_product_offers.json" |
| 174 | ``` |
medium line 181
Curl to non-GitHub URL
SourceSKILL.md
| 179 | - **curl:** |
| 180 | ```bash |
| 181 | curl -s "https://www.searchapi.io/api/v1/search?engine=amazon_search&q=Sony+WH-1000XM5&amazon_domain=amazon.com&api_key=$SEARCHAPI_API_KEY" \ |
| 182 | > ".ecom-price-monitoring/$SLUG/$DATE-amazon.json" |
| 183 | ``` |
Scanned on Aug 6, 2026
View Security Dashboard