Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Ads Analyzer

v1.0.0

Analyze extracted Meta ad creatives and generate a professional strategy report. Use after /meta_ads_extractor to produce a clean, organized analysis documen...

0· 757·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bluerockerr/meta-ads-analyser.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Ads Analyzer" (bluerockerr/meta-ads-analyser) from ClawHub.
Skill page: https://clawhub.ai/bluerockerr/meta-ads-analyser
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install bluerockerr/meta-ads-analyser

ClawHub CLI

Package manager switcher

npx clawhub@latest install meta-ads-analyser
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the instructions: the SKILL.md describes analyzing media and landing screenshots and producing an HTML report using a provided template. However, the instructions call out specific system tools (sips, ffprobe) and external delivery (Telegram) that are not reflected in the skill metadata (no required binaries, no required env vars). Those omissions are a mismatch between what the skill asks the agent to do and what it declares it needs.
!
Instruction Scope
The runtime instructions require reading files from a user home output folder, running local media tooling (sips, ffprobe), invoking vision and Gemini models for media analysis, generating an HTML file, zipping the folder, and 'Send via Telegram with caption'. The Telegram-send step is a potential data-exfiltration action but the skill declares no mechanism or credential for it. The use of macOS-specific sips and ffprobe (often not present by default) is prescriptive yet the skill metadata lists no required binaries — this gap may cause failures or hidden attempts to route data elsewhere. Overall the scope is plausible for the stated purpose, but the unqualified send-via-Telegram step and undeclared tooling are notable concerns.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute. That minimizes install-time risk (nothing is downloaded or written by an installer).
!
Credentials
The skill requests no environment variables or credentials in metadata, yet runtime instructions explicitly require sending the zipped report via Telegram. Sending via Telegram normally requires a bot token or API credentials; the absence of any declared TELEGRAM_TOKEN/CHAT_ID or equivalent is an inconsistency. Also the SKILL.md asks to use 'vision model' and 'Gemini' — these imply model API or platform access which may require credentials or billing; again nothing is declared. No broad secrets are requested in metadata, but the mismatch means the agent/host will need a way to transmit data that isn't specified.
Persistence & Privilege
The skill does not request always: true and does not modify other skills; it is user-invocable only. It writes output to the assets folder (its own working area) which is appropriate for its purpose.
What to consider before installing
This skill appears to do what it says (analyze extracted Meta ad assets and build an HTML strategy report) and it's instruction-only (no installers), but there are a few practical and privacy-related issues to consider before installing or running it: - Telegram delivery ambiguity: SKILL.md tells the agent to 'Send via Telegram with caption' but the skill metadata lists no TELEGRAM_TOKEN, CHAT_ID, or delivery mechanism. Clarify how Telegram sending is implemented and where credentials would be provided; do not store tokens in plaintext. If you do not want reports sent off your machine, remove or disable the Telegram step. - Local tooling requirements: The instructions call out sips (macOS) and ffprobe. The skill metadata lists no required binaries — verify these tools exist on the host or adjust the workflow. Missing binaries could cause failures or show attempts to fallback to other commands. - Model access: The SKILL.md references a 'vision model' and 'Gemini' for analysis. Ensure you understand what model endpoints will be used and whether those calls send media off your machine (and whether your account/billing is used). If the agent will upload images/videos to external APIs, that can expose sensitive data. - Data exfiltration risk: The skill zips the extracted asset folder and instructs sending it externally. Review the assets for any PII or proprietary content before allowing transmission. Prefer manual review and manual transfer if you have concerns. - Operational practice: Run the skill in a controlled environment (isolated workspace or VM) the first time, and test with non-sensitive sample data. Ask the skill author (or verify code) how Telegram sending is implemented and where credentials are required; require explicit prompts before any external transmission. If the author can clarify how Telegram delivery is handled (where/when credentials are used), and list required binaries (ffprobe, sips or cross-platform alternatives), this would reduce the remaining concerns and raise confidence.

Like a lobster shell, security has layers — review code before you run it.

latestvk970ybef3xh5mj7wgc82gm77tx81mhbz
757downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

Meta Ads Analyser

Generate a professional ad strategy analysis report from extracted Meta ad creatives.

Prerequisites

  • Extracted ad assets from /meta_ads_extractor (images, videos, landing page screenshots)
  • Ad creative analysis (hooks, scripts, emotions, CTAs, strengths/weaknesses)
  • Landing page analysis (headlines, strategies, conversion flows)

Input

Assets folder from extraction, typically at:

~/clawd/output/meta-ads/{advertiser-slug}/
├── {slug}-video-01.mp4
├── {slug}-video-02.mp4
├── {slug}-image-01.jpg
├── {slug}-image-02.jpg
├── landing-{page-name}.jpg
└── ...

Analysis Process

1. Analyze Each Creative

For each ad creative, identify:

  • Aspect Ratio — Dimensions and ratio (1:1, 4:5, 9:16, 16:9)
  • Duration — For videos, length in seconds
  • Hook — Opening line/visual that stops the scroll
  • Script/Copy — Key messaging and value proposition
  • Visual Flow — Sequence of scenes/elements (for video)
  • Emotion — Primary emotional trigger (curiosity, fear, aspiration, etc.)
  • CTA — Call to action and friction level
  • Strengths — What works well
  • Weaknesses/Gaps — What could be improved

Use vision model for images, Gemini for video analysis.

Get dimensions with:

# Images (macOS)
sips -g pixelWidth -g pixelHeight image.jpg

# Videos
ffprobe -v error -select_streams v:0 -show_entries stream=width,height -of csv=p=0 video.mp4

Common aspect ratios:

RatioUse Case
1:1Feed (universal)
4:5Feed (recommended)
9:16Stories/Reels
16:9Landscape video

2. Analyze Landing Pages

For each landing page, identify:

  • Headline — Primary value proposition
  • Strategy — Key conversion elements (social proof, urgency, etc.)
  • Conversion Flow — Path from landing to purchase/signup
  • Strengths — What converts well
  • Gaps — Missing elements or friction points

3. Map Funnels

Group ads by their destination landing page. Each funnel = landing page + all ads driving to it.

Typical funnel types:

  • TOFU (Top of Funnel) — Awareness, lead magnets, quizzes, free content
  • BOFU (Bottom of Funnel) — Direct offer, application, purchase

4. Identify Strategy Patterns

Look for:

  • Credibility stacking (logos, credentials, social proof)
  • Price anchoring
  • Native creative (ads that don't look like ads)
  • Identity-driven copy
  • Testing patterns (variants of same creative)

Output Format

Generate a self-contained HTML report using the template structure below.

Report Structure

1. Header
   - Advertiser name
   - Stats (# ads, # funnels, date)

2. Strategy Overview (TOP)
   - High-level acquisition strategy
   - Funnel flow visualization
   - Creative testing patterns
   - Key takeaways (actionable insights)

3. Funnel Sections (one per landing page)
   - Funnel header (name, URL)
   - Landing page card (screenshot + analysis)
   - Ad cards grid (media + analysis for each)
   
4. Footer
   - Source attribution
   - Date generated

Styling Guidelines

  • Clean, doc-like design — white background, simple typography
  • No dark gradients or heavy styling — should feel like a PDF/Notion doc
  • Inline media — videos and images embedded and playable
  • Mobile-friendly — responsive grid for ad cards
  • Badges for quick scanning — TOFU/BOFU, Video/Image, Variant, Top performer, Aspect ratio (1:1, 4:5, 9:16)

Ad Card Format

Each ad card should display:

[Media: video/image]
[Badges: Type | Funnel Stage | Aspect Ratio | Duration (if video)]
[Title]
[Analysis fields: Hook, Script, Emotion, Strengths, Gaps]

Include aspect ratio badge on every ad card so patterns are visible at a glance (e.g., "all TOFU ads are 4:5, BOFU ads are 1:1").

See templates/report-template.html for the full HTML/CSS template.

Delivery

  1. Generate HTML file in the assets folder:

    ~/clawd/output/meta-ads/{advertiser-slug}/{slug}-analysis.html
    
  2. Zip the entire folder (HTML + all media assets)

  3. Send via Telegram with caption explaining contents

Important: The HTML uses relative paths to media files. Always deliver as a zip so the recipient can open it locally with all assets.

Example Workflow

User: Analyze the EricPartaker ads we extracted

1. Read assets folder: ~/clawd/output/meta-ads/ericpartaker/
2. Analyze each video with Gemini / image with vision
3. Analyze landing page screenshots
4. Map ads to landing pages (identify 3 funnels)
5. Identify strategy patterns
6. Generate HTML report
7. Zip folder
8. Send to user

Integration

This skill is designed to follow /meta_ads_extractor:

/meta_ads_extractor → downloads assets
/meta_ads_analyser → generates strategy report

Can also integrate with:

  • ad-creative-analysis — detailed individual ad breakdowns
  • landing-page-analysis — deeper landing page audits

Comments

Loading comments...