Performance Marketing Agent — Adspirer
v1.0.0AI performance marketing agent for paid media, PPC, SEM, and digital marketing. Manage Google Ads, Meta Ads (Facebook & Instagram), LinkedIn Ads, and TikTok...
⭐ 0· 477·2 current·2 all-time
byAbhilash Mekala@amekala
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe an ad-management agent and the SKILL.md only asks you to install an 'openclaw-adspirer' plugin and perform OAuth connections to ad platforms — these requirements are coherent with the stated purpose.
Instruction Scope
Instructions are limited to installing the plugin, running 'openclaw adspirer login' and connecting ad accounts (OAuth/PKCE). The doc explicitly says write operations require confirmation and campaigns are created paused, which limits risk. No instructions ask the agent to read unrelated local files or environment variables.
Install Mechanism
Install is declared as a node plugin (id: openclaw-adspirer). No arbitrary download URLs or archive extraction are present in the SKILL.md. Because the skill is instruction-only, the actual plugin code will be installed at runtime by the OpenClaw plugin command — review that plugin before installing.
Credentials
No environment variables, credentials, or config paths are requested in the manifest. Authentication is described as OAuth 2.1 with PKCE via the plugin/site, which is appropriate for connecting ad platforms.
Persistence & Privilege
always is false and model invocation is enabled (default). Autonomous invocation plus a plugin that can call external ad APIs increases blast radius, but SKILL.md claims user confirmation for writes and paused campaign creation; still verify plugin behavior and OAuth scopes before granting access.
Assessment
This skill appears coherent for ad management, but before installing: 1) verify the plugin ID 'openclaw-adspirer' is the official Adspirer plugin (check the publisher and source repo or package registry); 2) confirm the exact OAuth scopes requested during 'openclaw adspirer login' (least privilege — only grant what is needed); 3) check whether tokens are stored and where (SKILL.md claims no local credential storage and PKCE, but verify in plugin docs); 4) test in a non-production account or with limited-permission ad accounts first; 5) confirm the billing/pricing links and the domains (SKILL.md references adspirer.ai while the listing shows adspirer.com—ensure these are legitimate and expected); 6) if you want to limit risk, disable autonomous invocation for the skill or require manual confirmation for all write operations within your agent settings. If you cannot find an authoritative plugin repository or vendor verification, treat the plugin as untrusted and avoid installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97e0v299vg7n4n52s0ntzjnkn821w4f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📈 Clawdis
Install
Adspirer Ad Management Plugin