Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Apple Search Ads consulting skill with no executable code, persistence, credential handling, or external data transfer.
Installers should understand this skill gives tactical advertising budget and campaign-optimization advice, but it does not connect to Apple Search Ads, change campaigns, read credentials, or run code. Review recommendations before applying them in an ad account because they can affect spend.
Code or instructions that leak agent conversation context to external services, potentially exposing sensitive user interactions.
1. Extract what the user already told you (don't re-ask)
2. Summarize your diagnosis, propose a focus area, give a preview — then wait for confirmation
## Step 1: Extract Context
From the user's message, extract:
- App name and category
The activation guidance says to use the skill for broad phrases such as "my CPA is too high," "my ads aren't converting," and "scaling app installs," which are common across many ad platforms and not specific to Apple Search Ads. Without clearer constraints or exclusion examples, this could cause unintended invocation for generic advertising questions.
This JSON file contains natural-language prompts and expected outputs entirely in Chinese, indicating the skill is designed to operate in a single language. Because there is no visible opt-in, alternative language support, or documented region-specific justification in this file, it presents a language/locale policy concern under the stated rules.