Apple Search Ads

• Analyzed: May 11, 2026, 4:42 AM
• Findings: 1
• Version: 1.0.0
• Hash: 64931d697c1e45163df99ecc2cbaff0a4fc2066440be3bd19a7b0da77d2a47e3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for Apple Search Ads is benign. It provides tools and documentation for managing Apple Search Ads campaigns, with all network communication directed to legitimate Apple API endpoints. The skill transparently declares its required environment variables and file system interactions, including the use of a private key file for JWT signing, and explicitly advises against storing secrets in plain text within markdown files. While shell scripts always carry an inherent risk of command injection if user input is not perfectly sanitized, the provided scripts use standard quoting practices and `jq` for robust JSON handling, and there is no evidence of intentional malicious behavior such as unauthorized data exfiltration, persistence mechanisms, or prompt injection designed to subvert the agent's purpose.