Google Shopping Optimizer

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: google-shopping-optimizer Version: 1.1.0 The Google Shopping Optimizer skill bundle is a comprehensive and legitimate set of instructions designed to guide an AI agent through ecommerce marketing tasks. The content across SKILL.md and the reference guides (feed-optimization-guide.md, bidding-strategy-playbook.md) focuses on auditing product feeds, optimizing ad titles, and managing bidding strategies within Google Merchant Center and Google Ads. There are no indicators of data exfiltration, malicious execution, or harmful prompt injection; all instructions are strictly aligned with the stated purpose of improving ad performance and feed quality.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If implemented without review, recommendations could increase or reallocate ad spend and affect campaign performance.

Why it was flagged

The skill's guidance can translate into real Google Ads account changes that affect bids and advertising spend. This is expected for a Shopping optimizer, but should not be applied automatically without user review.

Skill content
Apply adjustment in Google Ads at the campaign level.
Recommendation

Use the skill's output as a plan; require explicit approval before changing budgets, bids, negative keywords, campaign structure, or product groups.

What this means

The agent may see sensitive ecommerce and advertising performance data if you provide exports or connect accounts.

Why it was flagged

The workflow relies on Google Merchant Center and Google Ads data. That access is purpose-aligned, but it may expose product catalogs, prices, search queries, spend, conversions, and other account data.

Skill content
Export the full product feed from Merchant Center... Pull the Search Terms report for the past 30–90 days.
Recommendation

Prefer read-only exports or least-privilege account access for analysis; grant write access only when you are ready to approve specific changes.

What this means

Raw customer lists could expose personal information if pasted into the agent or shared more broadly than necessary.

Why it was flagged

The playbook references customer match lists, which can contain customer email or phone data for Google Ads audience targeting. This is normal advertising functionality, but it is sensitive customer data.

Skill content
Customer match list uploaded if available (email list with 1,000+ matched entries)
Recommendation

Do not provide raw customer email or phone lists unless necessary; upload customer match data directly through approved Google Ads workflows and follow privacy/legal requirements.