Plugin Scanner
iflytek/skillhub
Scan AI agent skills, plugins, MCP servers, and agent tooling for prompt injection, unsafe commands, secret exposure, and supply-chain risks before installing or trusting them.
Agent skill
Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain…
$ npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install xjli360/sealeap-amazon-skills sealeap-baxia-amazon-weather-driven-selection-scan --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/xjli360/sealeap-amazon-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan .claude/skills/sealeap-baxia-amazon-weather-driven-selection-scan && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "sealeap-baxia-amazon-weather-driven-selection-scan" agent skill from https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan into .claude/skills/sealeap-baxia-amazon-weather-driven-selection-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sealeap-baxia-amazon-weather-driven-selection-scan", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scanType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install xjli360/sealeap-amazon-skills sealeap-baxia-amazon-weather-driven-selection-scan --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/xjli360/sealeap-amazon-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan .agents/skills/sealeap-baxia-amazon-weather-driven-selection-scan && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "sealeap-baxia-amazon-weather-driven-selection-scan" agent skill from https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan into .agents/skills/sealeap-baxia-amazon-weather-driven-selection-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sealeap-baxia-amazon-weather-driven-selection-scan", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install xjli360/sealeap-amazon-skills sealeap-baxia-amazon-weather-driven-selection-scan --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/xjli360/sealeap-amazon-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan .cursor/skills/sealeap-baxia-amazon-weather-driven-selection-scan && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "sealeap-baxia-amazon-weather-driven-selection-scan" agent skill from https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan into .cursor/skills/sealeap-baxia-amazon-weather-driven-selection-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sealeap-baxia-amazon-weather-driven-selection-scan", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/xjli360/sealeap-amazon-skills.git --path amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install xjli360/sealeap-amazon-skills sealeap-baxia-amazon-weather-driven-selection-scan --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/xjli360/sealeap-amazon-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan .gemini/skills/sealeap-baxia-amazon-weather-driven-selection-scan && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "sealeap-baxia-amazon-weather-driven-selection-scan" agent skill from https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan into .gemini/skills/sealeap-baxia-amazon-weather-driven-selection-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sealeap-baxia-amazon-weather-driven-selection-scan", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install xjli360/sealeap-amazon-skills sealeap-baxia-amazon-weather-driven-selection-scanInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/xjli360/sealeap-amazon-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan .github/skills/sealeap-baxia-amazon-weather-driven-selection-scan && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "sealeap-baxia-amazon-weather-driven-selection-scan" agent skill from https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan into .github/skills/sealeap-baxia-amazon-weather-driven-selection-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sealeap-baxia-amazon-weather-driven-selection-scan", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install xjli360/sealeap-amazon-skills sealeap-baxia-amazon-weather-driven-selection-scan --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/xjli360/sealeap-amazon-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan .opencode/skills/sealeap-baxia-amazon-weather-driven-selection-scan && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "sealeap-baxia-amazon-weather-driven-selection-scan" agent skill from https://github.com/xjli360/sealeap-amazon-skills/tree/main/amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan into .opencode/skills/sealeap-baxia-amazon-weather-driven-selection-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sealeap-baxia-amazon-weather-driven-selection-scan", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
sealeap-baxia-amazon-weather-driven-selection-scanScreen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain…
Sealeap Baxia Amazon Weather Driven Selection Scan is an agent skill from xjli360/sealeap-amazon-skills. Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain response speed before committing inventory. Use for 极端天气或突发事件带来的短期需求判断、季节性选品的供需缺口验证、追热点选品前的产能与合规评估. Do not use to commit large inventory purchases based solely on a short observation window without a clearance or markdown fallback plan.
Its SKILL.md is about 670 tokens, which your agent loads only when the skill is triggered. The skill folder holds 7 other files, including scripts and reference files (for example `agents/openai.yaml`, `references/mcp-data-plan.md` and `references/playbook.md`).
It sits in Security, covering Supply chain security. It works with Model Context Protocol. The repository describes itself as: Reusable Agent Skills for Amazon product research, listings, advertising, inventory, and operations. The licence is MIT.
4 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 497d4b8. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Ships 1 file in scripts/ (Python), which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Sealeap Baxia Amazon Weather Driven Selection Scan loads about 666 tokens when it runs, and up to ~3k if it reads all its reference files. Until then it costs about 120 tokens; SKILL.md has 129 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
The full file from xjli360/sealeap-amazon-skills at commit 497d4b8, republished under its MIT licence (© xjli360). 129 words, ~666 tokens.
.claude/skills/sealeap-baxia-amazon-weather-driven-selection-scan/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain response speed before committing inventory.
用户未指定时采用“诊断”。
缺失项必须标为 NEEDS_EVIDENCE;不得猜数字、补属性或把不同站点、ASIN、变体、币种和时间窗混在一起。
先读取 references/playbook.md,确认该方法适用于当前对象。按以下顺序执行:
最后做数据充分性检查,并把结论分成 FACT / ESTIMATE / HYPOTHESIS / UNKNOWN。若关键证据不足,状态写 HOLD。
仅在自有数据不足且当前任务确实需要外部证据时,读取 references/mcp-data-plan.md,再使用 scripts/mcp_research.py。本 Skill 的外部取数目的:补充目标市场的销量与出口等公开统计数据,用于验证供需缺口是否成立。
doctor,再 search-tools 和 describe;工具名及参数以实时 tools/list 与 inputSchema 为准。tools/call 或 Actor 可能计费;先展示 Provider、工具、无密钥业务参数、预计成本与输出位置,核对已有授权覆盖后才加 --allow-cost;该标志不是费用上限。方案状态使用 READY FOR REVIEW / DRAFT / HOLD / STOP;如已执行,另行记录实际结果及回读证据。未得到明确批准时,不得声称已修改线上对象。
© xjli360, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 4 other files (scripts, references) in amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan of xjli360/sealeap-amazon-skills.
Open the folder on GitHubat commit 497d4b8
Sealeap Baxia Amazon Weather Driven Selection Scan next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Sealeap Baxia Amazon Weather Driven Selection Scan this skillxjli360/sealeap-amazon-skills | 251 | — | ~666 | Automated safety check: Pass | MIT | |
| Plugin Scanneriflytek/skillhub | 5.2k | 2 repos | ~1.1k | Automated safety check: Notes | Apache-2.0 | |
| Skill InspectorNVIDIA/SkillSpector | 20k | — | ~1.8k | Automated safety check: Pass | Apache-2.0 | |
| Vulners API Python SDKvulnersCom/api | 376 | — | ~2.3k | Automated safety check: Pass | MIT | |
| Hol Guard Protectionhashgraph-online/hol-guard | 845 | — | ~605 | Automated safety check: Pass | Apache-2.0 | |
| Bumblebeesickn33/agentic-awesome-skills | 47k | 1 repos | ~2.5k | Automated safety check: Notes | MIT |
iflytek/skillhub
Scan AI agent skills, plugins, MCP servers, and agent tooling for prompt injection, unsafe commands, secret exposure, and supply-chain risks before installing or trusting them.
NVIDIA/SkillSpector
Decides whether an agent skill is safe to install by combining a SkillSpector static scan with the agent's own source review, ending in APPROVE, CAUTION or REJECT.
vulnersCom/api
A skill your agent uses when modifying, testing, documenting, or reviewing the Vulners Python SDK.
hashgraph-online/hol-guard
Use HOL Guard to preview and protect AI-agent package installs, Cursor surfaces, CI, and automation workflows.
sickn33/agentic-awesome-skills
Run Bumblebee supply-chain inventory and exposure scans on macOS/Linux to detect compromised packages, extensions, and MCP host configs.
wshobson/agents
Step-by-step cookbook for setting up cryptographically signed audit trails on Claude Code tool calls.
xjli360/sealeap-amazon-skills
Diagnose Amazon Ads ACOS with reconciled CTR, CPC, CVR, AOV, ROAS, TACOS, placement, search-term, benchmark, attribution, and contribution-margin evidence, then produce a single-variable…
xjli360/sealeap-amazon-skills
Diagnose and draft Amazon Canada apparel advertising plans with lifecycle and seasonal timing, English/French search coverage, account evidence, profitability guardrails, and approval-ready…
xjli360/sealeap-amazon-skills
Audit, diagnose, rewrite, creatively brief, test, and safely prepare updates for Amazon product detail pages using live marketplace and product-type requirements, verified product facts, Brand…
xjli360/sealeap-amazon-skills
Filter, interpret, and turn the authorized 2025 Amazon Prime Day advertising insight records into a qualified event plan without averaging incompatible slices or treating historical benchmarks as…
xjli360/sealeap-amazon-skills
Research, diagnose, and draft Amazon Ads ASIN and category product-targeting plans that complement keyword targeting, including audience expansion, competitor and category traffic, cross-sell…
xjli360/sealeap-amazon-skills
Diagnose high Amazon Ads ACoS by decomposing CPC, conversion rate, price, query mix, placement mix, and sample sufficiency.
Works with
Categories
Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain…. Sealeap Baxia Amazon Weather Driven Selection Scan is an agent skill from xjli360/sealeap-amazon-skills. Screen a weather- or event-triggered demand spike for Amazon product opportunities by checking local supply-capacity gaps, installation or usage-friction barriers, and one's own supply-chain response speed before committing inventory.
Sealeap Baxia Amazon Weather Driven Selection Scan fits situations like: 极端天气或突发事件带来的短期需求判断、季节性选品的供需缺口验证、追热点选品前的产能与合规评估; commit large inventory purchases based solely on a short observation window without a clearance; markdown fallback plan.
Run `npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a claude-code`. Or copy the skill folder (amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan in xjli360/sealeap-amazon-skills) into .claude/skills/sealeap-baxia-amazon-weather-driven-selection-scan in your project. Claude Code loads it when a task matches its description.
Run `npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a codex`. Or copy the skill folder (amazon-skills/weixin/baxia/sealeap-baxia-amazon-weather-driven-selection-scan in xjli360/sealeap-amazon-skills) into .agents/skills/sealeap-baxia-amazon-weather-driven-selection-scan in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add xjli360/sealeap-amazon-skills --skill sealeap-baxia-amazon-weather-driven-selection-scan -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sealeap-baxia-amazon-weather-driven-selection-scan, .gemini/skills/sealeap-baxia-amazon-weather-driven-selection-scan, .github/skills/sealeap-baxia-amazon-weather-driven-selection-scan and .opencode/skills/sealeap-baxia-amazon-weather-driven-selection-scan in your project.
Going by SKILL.md and its folder, Sealeap Baxia Amazon Weather Driven Selection Scan needs Python for the scripts in its folder. Our summary lists: Python 3.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
Sealeap Baxia Amazon Weather Driven Selection Scan is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 666 tokens (SKILL.md is roughly 2.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 2.3k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Sealeap Baxia Amazon Weather Driven Selection Scan: Plugin Scanner (iflytek/skillhub, 5.2k stars), Skill Inspector (NVIDIA/SkillSpector, 20k stars), Vulners API Python SDK (vulnersCom/api, 376 stars) and Hol Guard Protection (hashgraph-online/hol-guard, 845 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
xjli360 (a GitHub user) maintains it in xjli360/sealeap-amazon-skills, which has 251 GitHub stars. The repository holds 179 skills in this directory. The repository was last updated on September 28, 2026.
Source: xjli360/sealeap-amazon-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.