Skill Amazon Listing Optimizer

Audit Amazon product listing images for non-square dimensions, auto-pad them to 2000×2000 white background, and push corrected images to live listings via SP...

This package appears to do what it claims, but stop and address the following before running on a production machine or with real seller credentials: - The image pusher starts a public HTTP server and directly maps request paths to files without sanitizing ../ sequences. If you run this server on a publicly reachable IP, an attacker (or crawler) could download arbitrary files readable by the process. Run the server only in a hardened environment, serve from an isolated directory, or replace the simple server with a secure static-file server that prevents path traversal. - Verify the SP‑API credential file (AMAZON_SPAPI_PATH) exists and that the credentials have only the minimal scopes needed (listings write). Keep those credentials private and rotate them if needed. - The README/SKILL.md mention a fix_title.js script that is not included — treat the docs as slightly unreliable and inspect the included scripts carefully before use. - The code makes an external call to api.ipify.org to detect the public IP; if you prefer not to call third‑party services, supply the public IP/hostname manually or use a secure proxy/S3 approach. - If you plan to run this on a server, host the images on a controlled CDN/S3 with restricted access where possible and confirm Amazon's required URL handling rather than exposing your entire host. If these issues are fixed (sanitize server paths or use a safe file server; remove missing/inaccurate docs), the skill would be coherent and appropriate for its purpose.

Type: OpenClaw Skill Name: skill-amazon-listing-optimizer Version: 1.0.0 The skill's stated purpose is benign, but the `scripts/push_images.js` file contains a critical path traversal vulnerability. Its temporary HTTP server, exposed on a public IP, uses `path.join(dir, req.url.replace(/^//, ''))` to serve files. This allows an attacker to use `../` sequences in the URL to read arbitrary files from the host system (e.g., `http://<ip>:<port>/../etc/passwd`), which is a significant data exfiltration risk. This is a severe vulnerability, classifying the skill as suspicious rather than benign, but without clear evidence of intentional malicious exploitation by the skill author.