Update Pangolinfo Amazon Data Scraper to 0.0.3

[Pangolin-spg]

Plugin Submission

Plugin information

• Author: pangolinfo
• Plugin name: pangolinfo_amz_data_scraper
• Version: 0.0.3
• Source repository: https://github.com/Pangolin-spg/dify-pangolinfo-marketplace-plugins
• Contact: support@pangolinfo.com

Submission type

• New plugin
• Version update

What changed

This update retains the seven existing Amazon data tools and adds three read-only tools:

• Amazon Reviews for ratings and review text by ASIN
• Amazon Niche Data for demand and brand-concentration filtering
• Amazon Alexa for Shopping recommendations and answers

It also replaces credential validation that previously executed a scraping request with a non-consuming MCP initialization check, restricts requests to fixed Pangolinfo HTTPS endpoints, adds a 90-second timeout and sanitized errors, and updates English and Chinese documentation with canonical Pangolinfo product/API links and the public source repository.

Risk level

• Low risk
• Medium risk
• High risk

The plugin performs read-only requests to fixed, documented Pangolinfo HTTPS endpoints. It does not execute commands or code, access files, accept arbitrary service endpoints, automate a browser, or bundle executables.

Required checks

• I have read and followed the Marketplace submission requirements.
• I have read and comply with the Plugin Developer Agreement.
• I tested this plugin on Dify Community Edition and Dify Cloud, or documented any limitation below.
• The package contains only files needed at runtime.
• The package does not contain secrets, local credentials, .env files, .git directories, virtual environments, caches, logs, or IDE files.
• The package does not contain executables or bundled binaries, or I explained why they are required below.
• The plugin README includes setup steps, usage instructions, required APIs or credentials, connection requirements, and the source repository link.
• The plugin includes PRIVACY.md or a hosted privacy policy, and manifest.yaml references it.
• All user-facing text is primarily in English, with any localized README files following the i18n guidance.

Security and privacy notes

The API key is a Dify secret-input and is sent only as a Bearer credential over HTTPS to fixed Pangolinfo hosts. User-provided Amazon URLs, ASINs, keywords, review filters, niche thresholds, and Alexa prompts are sent to the corresponding Pangolinfo API. Credential validation sends a standard MCP initialize request to https://mcp.pangolinfo.com/mcp. Tool requests use documented paths under https://scrapeapi.pangolinfo.com. The plugin does not log keys or include raw response bodies in errors. Data handling is documented in PRIVACY.md.

Local validation

python scripts/validate.py
Validation passed: 10 tools, canonical links, schemas, and credential hygiene.

python -m unittest discover -s tests -v
Ran 4 tests in 0.001s — OK

python -m compileall -q amazon-data-scraper
dify plugin package amazon-data-scraper -o pangolinfo-amz-data-scraper-0.0.3.difypkg
Plugin packaged successfully.

SHA-256: e7a008b665b61424294eae1daabf56de58c9048c83d0b1cf38ac22198ea75e11

The package archive was inspected to confirm that it contains no virtual environment, cache, test, script, compiled Python, nested package, credential, or local-development files.

Reviewer notes

This is a backward-compatible update of the existing pangolinfo/pangolinfo-amz-data-scraper listing. Existing tool identities are unchanged; three tools are appended. Automated unit and package validation were completed locally. A live Pangolinfo credential was not committed or included in the package. End-to-end installation in Dify CE and Dify Cloud was not performed in this clean build environment; reviewer installation testing is welcomed. The source and signed release artifact are available at https://github.com/Pangolin-spg/dify-pangolinfo-marketplace-plugins/releases/tag/amazon-data-scraper-v0.0.3.