ClawHub
Back to skill

Security audit

Amazon PPC

Security checks across malware telemetry and agentic risk

Overview

This is a markdown-only Amazon PPC planning guide with business advice but no code, credentials, API automation, or hidden persistence.

Install risk is low from a technical security perspective. Treat the recommendations as business advice: verify margins, budgets, and campaign changes before applying them in Amazon Ads, and re-review future versions if they add API access, credentials, executable code, or automatic account changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Memory PoisoningPersistent Context Injection, Context Window Stuffing, Memory Manipulation
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
1. **Launching with only auto campaigns** — Auto gives Amazon maximum control and often routes budget to irrelevant terms. Always pair with at least one manual exact campaign.

2. **Setting ACoS targets without checking margin** — A 30% ACoS target on a product with 25% margin is a guaranteed loss. Always derive target ACoS from unit economics first.

3. **Never adding negative keywords** — Even excellent products will have irrelevant search volume. Not adding negatives is an ongoing tax on every campaign dollar.
Confidence
75% confidence
Finding
without checking

Memory Manipulation

High
Category
Memory Poisoning
Content
- [ ] All four tiers planned (Research, Performance, Brand Defense, Competitor)
- [ ] Campaign naming convention documented and applied consistently
- [ ] No duplicate campaigns targeting the same match type + keyword combination
- [ ] Each campaign has a clear stated purpose
- [ ] Daily budgets set with minimum 10× Max CPC floor

### Keywords
Confidence
80% confidence
Finding
clear state

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.