中文 EN
Start Review
Skill Trust Decision

amazon-search

合法的 Amazon 搜索工具，所有能力与声明一致，无恶意行为发现

Install decision first Source: ClawHub Scanned: Apr 6, 2026
Files 10
Artifacts 24
Violations 0
Findings 3

Why this conclusion was reached

1/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Block
Hidden execution and egress

10 high-risk artifacts or egress signals were extracted.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

2 dependency or supply-chain issues need attention.

What drove the risk score up

SKILL.md 中的远程脚本安装命令 +5

curl -fsSL https://bun.sh/install | bash 是安装官方 BUN 运行时的标准方式，合法但存在理论风险

依赖无版本锁定 +10

playwright: ^1.58.2, sharp: ^0.33.0 等依赖使用范围版本，存在供应链风险

Playwright 反检测配置 +5

使用反检测参数是爬虫工具常见做法，用于规避 Amazon 的 bot 检测，属于灰色地带但有合理解释

Most important evidence

Low Supply Chain

依赖包无版本锁定

package.json 中的依赖使用范围版本（如 playwright: ^1.58.2），未锁定精确版本，存在供应链攻击风险

scripts/package.json:14
使用精确版本（如 1.58.2）或锁定版本范围以减少供应链风险
Info Sensitive Access

访问用户缓存目录

image-cache 访问 ~/.cache/trend2product/images 和 %LOCALAPPDATA%/trend2product/images，用于存储下载的图片缓存

scripts/vendors/image-cache/src/index.ts:18
这是正常的缓存功能，符合工具声明的用途
Info Doc Mismatch

SKILL.md 中的运行时安装命令

文档要求用户执行 curl -fsSL https://bun.sh/install | bash 安装 Bun 运行时

SKILL.md:17
这是安装官方 BUN 运行时的标准方式，但远程管道执行存在理论风险，建议在文档中说明

Declared capability vs actual capability

Filesystem Pass
Declared WRITE
→
Inferred WRITE
SKILL.md:缓存/结果写入，代码正常实现
Network Pass
Declared READ
→
Inferred READ
SKILL.md:访问 Amazon 搜索，代码正常实现
Shell Pass
Declared WRITE
→
Inferred WRITE
SKILL.md:使用 Bun 运行，execSync 调用 npm run psearch
Browser Pass
Declared WRITE
→
Inferred WRITE
SKILL.md:使用 Playwright 浏览器搜索

Suspicious artifacts and egress

Critical Dangerous Command
curl -fsSL https://bun.sh/install | bash

SKILL.md:17

High IP Address
139.0.0.0

scripts/playwright_getcookie.ts:18

High IP Address
136.0.0.0

scripts/playwright_getcookie.ts:19

High IP Address
138.0.0.0

scripts/playwright_getcookie.ts:21

High IP Address
141.0.0.0

scripts/playwright_search.ts:19

High IP Address
132.0.0.0

scripts/playwright_search.ts:20

High IP Address
137.0.0.0

scripts/playwright_search.ts:25

High IP Address
135.0.0.0

scripts/playwright_search.ts:26

High IP Address
140.0.0.0

scripts/playwright_search.ts:27

High IP Address
120.0.0.0

scripts/vendors/image-cache/src/index.ts:105

Medium External URL
http://127.0.0.1:7890

SKILL.md:5

Medium External URL
https://bun.sh/install

SKILL.md:17

Dependencies and supply chain

PackageVersionSourceKnown vulnNotes
playwright ^1.58.2 npm No 无版本锁定
sharp ^0.33.0 npm No 无版本锁定
tsx ^4.21.0 npm No devDependencies

File composition

10 files · 1842 lines
TypeScript 5 files · 1482 linesMarkdown 1 files · 183 linesIgnore 2 files · 155 linesJSON 2 files · 22 lines
Files of concern · 6
scripts/playwright_search.ts TypeScript · 494 lines
141.0.0.0 · 132.0.0.0 · 137.0.0.0 · 135.0.0.0 · 140.0.0.0 · https://www.amazon.com/s?k=$ · https://www.amazon.com$
scripts/amazon_search.ts TypeScript · 460 lines
https://www.amazon.com
SKILL.md Markdown · 183 lines
SKILL.md 中的运行时安装命令 · curl -fsSL https://bun.sh/install | bash · http://127.0.0.1:7890 · https://bun.sh/install · https://m.media-amazon.com/images/I/91YprRrDB4L._AC_UL960_FMwebp_QL65_.jpg · https://www.amazon.com/dp/B09TPN9NJ6 · http://127.0.0.1:10809
scripts/playwright_getcookie.ts TypeScript · 187 lines
139.0.0.0 · 136.0.0.0 · 138.0.0.0 · https://www.amazon.com/
scripts/vendors/image-cache/src/index.ts TypeScript · 192 lines
访问用户缓存目录 · 120.0.0.0 · https://www.google.com/ · https://www.pinterest.com/ · https://www.facebook.com/ · https://www.instagram.com/ · https://www.temu.com/
scripts/package.json JSON · 15 lines
依赖包无版本锁定
Other files · configure.ts · .gitignore · .gitignore · package.json

Security positives

功能实现与 SKILL.md 声明完全一致，无阴影功能
代码结构清晰，无混淆或隐蔽执行
无凭证收割、远程控制或数据外泄行为
缓存机制设计合理，使用 ASIN/uuid 防重复
支持代理配置和增量搜索，功能完整
Playwright 反检测是为了绕过 Amazon 的 bot 检测，属于爬虫工具的常见做法