amazon-opportunity-discoverer
Automates product opportunity scanning for Amazon sellers, validating and ranking niches using real-time data and scoring strategies.
Install this skill
or
87/100
Security score
The amazon-opportunity-discoverer skill was audited on Jul 27, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 37
Access to hidden dotfiles in home directory
SourceSKILL.md
| 37 | - **Local files**: a temporary `/tmp/review_<ASIN>_<timestamp>/` working dir during the review fallback; reads the optional credential store `~/.zoodata/config.json`. |
medium line 74
Access to hidden dotfiles in home directory
SourceSKILL.md
| 74 | When `ZOODATA_API_KEY` is not set (verify via `python {skill_base_dir}/scripts/zoodata.py check` — exits 2 if no key in env or `~/.zoodata/config.json`): follow the **"On Missing Key"** protocol in `z |
low line 31
External URL reference
SourceSKILL.md
| 31 | Required: `ZOODATA_API_KEY`. Get free key at [zoodata.ai/api-keys](https://zoodata.ai/en/api-keys) |
low line 35
External URL reference
SourceSKILL.md
| 35 | - **Network**: only `https://api.zoodata.ai` (Bearer `ZOODATA_API_KEY`). Setting `ZOODATA_BASE_URL` to any other host triggers a CLI warning — do not point it at hosts you don't trust. |
low line 74
External URL reference
SourceSKILL.md
| 74 | When `ZOODATA_API_KEY` is not set (verify via `python {skill_base_dir}/scripts/zoodata.py check` — exits 2 if no key in env or `~/.zoodata/config.json`): follow the **"On Missing Key"** protocol in `z |
Scanned on Jul 27, 2026
View Security DashboardGitHub Stars 47
Rate this skill
Categorymarketing
UpdatedAugust 9, 2026
frontendplaywrightdocxgitapibackendgrowth-marketerproduct-marketermarket-research-analystsdrbusiness-developmentmarketingdata analyticssales
SerendipityOneInc/APIClaw-Skills