DTC Helper

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent and appears benign, but it asks for advertising and store performance snapshots that may be business-sensitive.

This skill appears safe to install as an instruction-only ads diagnostic helper. Before using it, be mindful that the requested account snapshots, pixel data, and performance windows may contain confidential business information; provide only what is necessary and avoid sharing credentials or tokens.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

A user may share details about ad spend, campaign structure, tracking quality, and store performance.

Why it was flagged

The skill asks the user to provide advertising account, tracking pixel, store, and performance data. This is appropriate for ads diagnostics, but it can reveal sensitive business information.

Skill content

Required:
- store_url
- platform_account_snapshot
- pixel_event_snapshot
- recent_performance_window

Recommendation

Share only the relevant snapshots needed for the diagnosis, redact secrets or unnecessary account identifiers, and do not provide passwords, API keys, or session tokens.