TikTok Ad Library & TikTok Creative Center & TikTok Ads Examples & TikTok Top Ads
v1.0.2Research TikTok ad creatives, examples, and top-performing ad patterns using PipiAds TikTok ad discovery tools.
⭐ 0· 58·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the declared requirements: it needs an API key for PipiAds (PIPIADS_API_KEY) and npm to install/run the pipiads CLI/mcp server used to query PipiAds. These are coherent for a PipiAds-backed TikTok ad discovery skill.
Instruction Scope
SKILL.md only instructs the agent to install/run the pipiads mcp server, set the PIPIADS_API_KEY, and call search/detail endpoints for ads/products/stores. It does not ask for unrelated files, other credentials, or system paths beyond npm and the API key.
Install Mechanism
The skill's openclaw metadata includes an npm global install: `npm install -g pipiads-mcp-server@1.0.3`. Using npm is a common approach, but global installs execute third-party code on the host (moderate risk). Registry metadata reported 'no install spec' while SKILL.md includes one — minor inconsistency to verify.
Credentials
Only a single API credential (PIPIADS_API_KEY) is required, which is proportional for an integration that queries PipiAds. No other secrets or unrelated environment variables are requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable; it requests no system-wide configuration changes or access to other skills' credentials. It will, however, run an installed npm-provided binary (mcp server) while active.
Assessment
This skill appears to do what it says — it uses PipiAds and needs your PIPIADS_API_KEY plus npm to install a helper binary. Before installing or providing your API key: 1) Verify the npm package (pipiads-mcp-server@1.0.3) is published by the official PipiAds publisher and inspect its npm page/source if possible; 2) Prefer installing/testing in an isolated environment (container/VM) if you are unsure; 3) Confirm the API key comes from the expected site (pipispy.com/pipiads.com) and that you’re comfortable with the billing model described; 4) Note the small metadata inconsistency (registry said no install spec but SKILL.md includes one) and confirm that runtime will not perform unexpected network calls beyond the PipiAds API.Like a lobster shell, security has layers — review code before you run it.
latestvk97fbdgap51c7tmwcj3r1ra9zh843yyd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binsnpm
EnvPIPIADS_API_KEY
Primary envPIPIADS_API_KEY