Competitive Ads Extractor Pro

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:20 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only marketing research skill that collects competitor ads and saves local analysis files, with no hidden code or credential use found.

Install only if you want an agent to gather public competitor ads and save screenshots, markdown reports, CSVs, or similar research artifacts locally. Keep requests narrow, respect ad-library terms and intellectual property, avoid login-only or restricted content unless authorized, and delete or relocate saved ~/competitor-ads archives when they are no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 92% confidence
• Finding: The skill explicitly describes saving screenshots and analysis artifacts locally, but the top-level description does not clearly warn users that competitor ad content and derived analysis will be written to disk. This can lead to unintentional local retention of third-party marketing materials or potentially sensitive research outputs, especially on shared machines or synced folders.

VirusTotal

64/64 vendors flagged this skill as clean.