Adspirer Ads Agent

• Outcome: Review
• Latest audit: Sep 10, 2026 · 8:49 PM UTC
• Version: 1.5.0

Overview

The skill is transparent about managing real ad accounts, but it should be reviewed because it delegates high-impact ad-account control to an unpinned external plugin.

Review the Adspirer plugin and OAuth scopes before installing, and connect only the ad accounts you are comfortable letting it read and manage. Keep write actions behind explicit confirmation, check campaigns before enabling spend, and pay attention to scheduled monitors or reports that may continue running after setup.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:54

Finding

Unpinned Third-Party Node Plugin Installation

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Autonomous Decision Making

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · SKILL.md (reported line 255)May include surrounding context.

md

4. All campaigns are created in **PAUSED status** for user review
5. Avoid policy-violating keywords: health conditions, financial hardship, political topics, adult content
6. When in doubt about any spend-affecting action, **ask the user first**
7. Read operations (performance data, keyword research, analysis) are safe to run without confirmation
8. Write operations (create, update, pause, resume, delete) always need user confirmation

---

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The manifest summary and description do not warn users that the skill can access live advertising data and perform real modifications to campaigns and budgets. Because this skill operates in a financial and account-management context, missing warnings can cause users or orchestrating agents to treat it like a harmless informational tool and accidentally authorize costly or sensitive actions.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The manifest description advertises broad natural-language management of ad campaigns across multiple live advertising platforms without stating meaningful scope boundaries or trigger constraints. In a high-impact domain where actions can spend money, change campaigns, and access performance data, this increases the risk that a user or upstream agent invokes the skill for unintended live operations.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.