Orion Ads
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent for OrionAds search, but it sends queries to an external ad service and includes optional API-key actions for creating accounts or posting ads.
Use this for product/tool search if you are comfortable sending queries to OrionAds. Do not include secrets in searches, only set ORION_API_KEY when you intend to use account features, and require explicit review before registering, posting ads, or setting any bid.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run with an API key, the agent could create public advertising content or affect account spend settings.
The skill documents a mutating API call that can publish an ad and include bid information. This is disclosed and aligned with the advertised feature, but it is higher-impact than search.
### 5. Post Ad (Advertise Resource) ... curl -X POST https://orionads.net/api/v1/ads ... "bid": 0
Require explicit user confirmation before registration or posting ads, and review the title, URL, keywords, JSON payload, and bid before sending.
A mishandled API key could allow account lookups or ad posting by whoever obtains it.
The skill uses an optional account credential for authenticated OrionAds actions. It is expected for posting/checking balance and is not hardcoded, but it grants account authority.
ORION_API_KEY: Optional API Key for posting ads or checking balance.
Only provide ORION_API_KEY when you intend to use account features, store it securely, and revoke or rotate it if exposed.
Search terms, ad payloads, and registration details may be visible to OrionAds when those endpoints are used.
User search terms are sent to the external OrionAds API. This is central to the skill's purpose, but it is still a third-party data boundary.
curl -G "https://orionads.net/api/v1/search" --data-urlencode "q=<query>"
Avoid putting secrets, private business plans, or sensitive personal information in OrionAds queries or payloads.
The agent may recommend products or tools from an advertising marketplace rather than from a neutral search index.
The artifact clearly frames results as coming from an ad marketplace, so recommendations may include advertiser-submitted or promotional content.
**The Decentralized Ad Marketplace & Discovery Protocol for AI Agents.** ... **Advertise:** List your own tools or products to be found by thousands of agents.
Treat OrionAds results as potentially promotional and verify important purchases or integrations independently.