Amazon Ppc Analyzer

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a coherent Amazon PPC analysis skill, with the main thing to notice being that it can use Bash to save campaign data and reports locally.

This skill appears safe to use for its stated PPC analysis purpose. Before installing, be aware that it can use Bash and that it saves campaign data locally in ~/amazon-ppc/, so only provide advertising data you are comfortable storing on this machine.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may be able to perform local shell/file operations while using this skill, although the artifacts only describe scoped report and memory storage.

Why it was flagged

The skill enables Bash even though the primary purpose is analysis; this appears intended for local workspace/report file handling, but users should notice the shell capability.

Skill content
allowed-tools: Bash
Recommendation

Use the skill for PPC analysis, but review any proposed Bash/file operation before allowing it if your environment asks for tool approval.

What this means

Sensitive advertising performance data may remain on the local machine and be reused in later PPC audits.

Why it was flagged

The skill persists user-provided campaign data, account history, and raw snapshots locally for future analysis.

Skill content
Creates `~/amazon-ppc/` containing: `memory.md` — saved campaign profiles and account history ... `data/` — raw data snapshots for trend tracking
Recommendation

Avoid pasting data you do not want stored, and periodically review or delete ~/amazon-ppc/ if you no longer need the saved campaign history.