Google Shopping Optimizer

PassAudited by ClawScan on May 7, 2026.

Overview

This instruction-only skill appears legitimate for Google Shopping optimization, but it may use ad-account data and suggest changes that affect advertising spend.

This skill is reasonable to use as a Google Shopping consulting aid. Before using it, decide whether you will provide exports or connect account tools, keep access read-only where possible, avoid pasting raw customer lists, and manually review any recommended bid, budget, feed, or campaign changes before applying them.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If implemented without review, recommendations could increase or reallocate ad spend and affect campaign performance.

Why it was flagged

The skill's guidance can translate into real Google Ads account changes that affect bids and advertising spend. This is expected for a Shopping optimizer, but should not be applied automatically without user review.

Skill content
Apply adjustment in Google Ads at the campaign level.
Recommendation

Use the skill's output as a plan; require explicit approval before changing budgets, bids, negative keywords, campaign structure, or product groups.

What this means

The agent may see sensitive ecommerce and advertising performance data if you provide exports or connect accounts.

Why it was flagged

The workflow relies on Google Merchant Center and Google Ads data. That access is purpose-aligned, but it may expose product catalogs, prices, search queries, spend, conversions, and other account data.

Skill content
Export the full product feed from Merchant Center... Pull the Search Terms report for the past 30–90 days.
Recommendation

Prefer read-only exports or least-privilege account access for analysis; grant write access only when you are ready to approve specific changes.

What this means

Raw customer lists could expose personal information if pasted into the agent or shared more broadly than necessary.

Why it was flagged

The playbook references customer match lists, which can contain customer email or phone data for Google Ads audience targeting. This is normal advertising functionality, but it is sensitive customer data.

Skill content
Customer match list uploaded if available (email list with 1,000+ matched entries)
Recommendation

Do not provide raw customer email or phone lists unless necessary; upload customer match data directly through approved Google Ads workflows and follow privacy/legal requirements.