Ads Campaign Monitor

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:14 PM UTC
• Version:
  1.0.0

Overview

This is an ad-campaign monitoring guidance skill with broad trigger wording, but no hidden execution, data access, persistence, or destructive behavior was found.

Reasonable to install for advertising operations or campaign-health monitoring. Review its advice when your request is only about general growth, revenue, or marketing strategy, and only provide campaign IDs, logs, thresholds, or contact details that you intend the agent to use.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger conditions are broad enough to match many ordinary business and marketing queries, which can cause this specialized skill to activate outside its intended scope. In an agent system, overbroad routing can lead to inappropriate operational guidance, incorrect escalation behavior, or unnecessary handling of sensitive advertising account context when a more general skill should respond.

VirusTotal

66/66 vendors flagged this skill as clean.