Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xjli360/sealeap-amazon-ad-skills --skill sealeap-amazon-seller-message-fraud-defensegit clone --depth 1 https://github.com/xjli360/sealeap-amazon-ad-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xjli360/sealeap-amazon-ad-skills/sealeap-amazon-seller-message-fraud-defense)<a href="https://agentmods.dev/skills/xjli360/sealeap-amazon-ad-skills/sealeap-amazon-seller-message-fraud-defense"><img src="https://agentmods.dev/badge/skills/xjli360/sealeap-amazon-ad-skills/sealeap-amazon-seller-message-fraud-defense/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xjli360/sealeap-amazon-ad-skills/sealeap-amazon-seller-message-fraud-defense"><img src="https://agentmods.dev/badge/skills/xjli360/sealeap-amazon-ad-skills/sealeap-amazon-seller-message-fraud-defense.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00085 | $0.00841 |
| Opus 5.5 | $0.00034 | $0.00336 |
| Sonnet 5.5 | $0.00017 | $0.00168 |
| Haiku 4.5 | $0.00009 | $0.00084 |
Grade A, and why
sealeap-amazon-seller-message-fraud-defense scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Amazon 卖家消息欺诈防御
目标
降低被勒索、钓鱼或诱导违规的风险，在不破坏证据的情况下通过官方支持与安全流程处置。
适用任务
- 买家或陌生卖家以差评、投诉或批量订单威胁。
- 站内信声称客服承诺好处、要求站外联系或付款。
- 怀疑账号钓鱼、恶意订单或社交平台合作陷阱。
开始前要拿到
- 完整消息线程、订单号、时间、附件和链接文本。
- 账号登录、安全事件、员工操作和相关服务商沟通。
- 当前 Amazon 消息、举报和账户安全入口。
缺失的数据要明确列为缺口，并把结论标成事实、估算或假设；不要补造数字。
不可妥协的边界
- 不要点击未知链接、下载附件、转账、提供验证码或转到私人聊天工具。
- 不要辱骂、威胁、虚构反证或删除与事件有关的记录。
- 如果卖家自身参与了测评或其他违规，立即停止并如实评估风险，不能设计掩盖方案。
- 当前 Amazon 官方政策、帮助页、账户资格和后台实际字段优先于本 Skill 中的经验框架；规则可能变化时先核验。
- 默认提供诊断或草案。写入前展示对象、旧值、新值、影响、停止线与回退，核对用户已有授权是否覆盖对象、动作与预算；范围已明确授权时继续执行并回读核验，只有未覆盖或扩大的范围才请求批准。
- 不输出原素材的创作者身份、账号、链接、视频编号或可反查线索；当前业务证据的官方来源、采集时间和口径仍需保留。
工作流
1. 立即隔离
停止非必要互动，不点击链接，限制相关账号权限，并检查是否存在异常登录或付款变更。
2. 保全证据
导出完整线程、订单、时间、发件身份和附件哈希，保留原始顺序。
3. 分类事件
区分钓鱼、勒索、虚假客服、异常订单、评价威胁和普通客户投诉，避免把真实售后误判为攻击。
4. 走官方路径
通过 Seller Central 支持、Report Abuse 或账户安全入口提交事实和证据，保存案例编号。
5. 处理订单
按官方指导和订单状态决定发货、取消或退款；不自行创造理由，也不支付对方。
6. 强化控制
更新 MFA、最小权限、服务商审批和消息响应 SOP，培训团队识别相同话术。
判断标准
- 事件分类与证据对应。
- 所有沟通留在允许渠道并避免泄露个人数据。
- 账号安全和业务处置分别跟踪。
必须交付的结果
- 事件时间线与证据包。
- 风险分类和即时隔离清单。
- 官方报告草稿。
- 账号与供应商控制改进项。
结尾列出数据窗口、关键假设、证据缺口、风险和下一步；如包含待执行动作，单独放在“待批准变更”中。
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 75 lines · 85 tokens per session scan A 9161552c4092
sealeap-amazon-seller-message-fraud-defense is a skill published in the GitHub repository xjli360/sealeap-amazon-ad-skills (86 stars, last pushed 1mo ago), licensed MIT. It adds 85 tokens to every session and 841 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other skills, from other repositories
zach-search-term-analyzer
An analyzer for Amazon Brand Analytics Top Search Terms reports, which show popular searches across Amazon and how clicks and conversions are distributed among products.
ecom-image2
An image-generation workflow for creating e-commerce visuals with GPT-Image-2, such as product images, banners, social posts, and infographics.
sorftime-seller-agent
Sorftime Seller Agent — Expert-level cross-border e-commerce data analysis and product sourcing intelligence for Amazon, Walmart, TikTok Shop, 1688, Shopee, and TEMU sellers (plus Reddit social-listening queries). A single skill that turns any MCP-enabled AI agent (Claude Code, OpenClaw, Cursor, Copilot) into a…
ai-model-expert-1688-ecommerce-video-generation-editing
An AI tool workflow for creating and editing 1688 e-commerce videos from text, images, videos, or audio. 1688 is a Chinese online wholesale marketplace.
302-ai-alternative-ai-hive
A migration guide for teams moving between AI model API platforms, especially for image and video generation. It helps review an existing OpenAI-compatible integration and plan testing, routing, and fallback options.
ai-hive-agentic-ocr-targeted-evidence
A document-search workflow that first finds likely pages and then uses OCR, or software that reads text from images, on only the relevant scans, tables, or small text.