ClawHub

Adspy & Ad Library: TikTok & Facebook

v1.0.2

Research TikTok and Facebook ads plus Meta Ad Library results in one combined cross-platform PipiAds skill.

⭐ 0· 62·0 current·0 all-time
by@fanyanggod
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required env var (PIPIADS_API_KEY), and declared binary (npm) align with a third-party PipiAds integration. Asking for an API key and an npm-installed helper (pipiads-mcp-server) is proportionate to a service-wrapper skill.
✓
Instruction Scope
SKILL.md limits actions to installing/running pipiads-mcp-server with the PIPIADS_API_KEY and calling PipiAds endpoints; it does not instruct the agent to read unrelated files, other env vars, or exfiltrate unspecified data. The instructions do include running a local MCP server helper, which is expected for this sort of integration.
ℹ
Install Mechanism
Installation is via npm install -g pipiads-mcp-server@1.0.3 (public npm registry). This is a traceable, common mechanism but it installs a global binary and writes files to disk. Also note a minor inconsistency: registry metadata indicated 'No install spec', yet SKILL.md contains an install section.
✓
Credentials
Only a single credential (PIPIADS_API_KEY) is requested and is declared as the primary credential. That matches the skill's needs; no unrelated secrets or config paths are required.
ℹ
Persistence & Privilege
Skill is not always:true and allows normal user invocation/autonomous use. It does propose installing and running a local MCP server process (global npm package) which may persist while used; this is reasonable but means you should be aware a local binary will be installed and executed.
Assessment
This skill appears to do what it says: it uses a PipiAds API key and an npm-installed helper to query adspy and Meta Ad Library data. Before installing, verify the origin and trustworthiness of the pipiads-mcp-server package on npm (review its source code/repo, maintainer, and recent releases), confirm you obtained PIPIADS_API_KEY from the legitimate PipiAds/PipiSpy site, and be prepared for a global npm package and a local helper process to be installed/run on your machine. If you prefer lower risk, run the npm install and the MCP helper inside a disposable container or VM. Finally, note the SKILL.md includes an install step even though the registry summary said 'no install spec'—you may want to confirm which install behavior the platform will actually perform.

Like a lobster shell, security has layers — review code before you run it.

latestvk975krvmbrs2g74cj44hb1g7td84363a

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
Binsnpm
EnvPIPIADS_API_KEY
Primary envPIPIADS_API_KEY

Comments