Ai Intelligent Ad Optimization

广告优化，投放优化 + 创意优化。

Security Scan

The skill claims to be an ad-optimization assistant but provides only instructions that clone and run unknown remote Python code (pip install + python app.py) and does not declare the ad-account credentials or resources it would realistically need — this mismatch and the implicit remote code execution are concerning.

Purpose & Capability

Name/description match an ad-optimization tool, but the package contains no code and requests no credentials or config. A real ad optimizer would normally require API keys/credentials for ad platforms, data sources, or configuration details; none are declared. The SKILL.md's install instructions point to a GitHub repo (not included in the package) which is inconsistent with the skill being self-contained.

Instruction Scope

The SKILL.md tells the operator to git clone a remote repository, pip install dependencies, and run python app.py. Those steps instruct the agent/user to download and execute arbitrary remote code and to install arbitrary Python packages — actions that go well beyond a simple instruction-only skill and could lead to data access or exfiltration depending on the remote code.

Install Mechanism

There is no formal install spec in the skill metadata, but the runtime instructions encourage cloning from GitHub and running pip install -r requirements.txt. While GitHub is a common host, the repository is not bundled with the skill and may contain arbitrary code and dependencies; pip installing an unreviewed requirements file increases supply-chain risk.

Credentials

The skill declares no required environment variables or primary credential, yet as an advertising integration it would normally need platform credentials (e.g., Google/Meta Ads API keys) and possibly data access tokens. The absence of declared credentials is disproportionate and leaves ambiguity about where and how the remote app will obtain or ask for secrets.

Persistence & Privilege

The skill is not always-enabled and does not request elevated persistence or automatic global inclusion. There is no evidence it modifies other skills or system-wide settings in the package metadata.

What to consider before installing

This skill is suspicious because its instructions tell you to clone and run code from a remote GitHub repo (pip install + python app.py) but the package contains no code and declares no credentials for ad platforms. Before installing or running anything: verify the GitHub repository exists and is maintained by a trusted author; inspect its code, requirements.txt, and app.py for network calls, credential handling, or data exfiltration; only run in an isolated/sandboxed environment; do not provide your ad-account API keys until you confirm how they are stored and used; prefer skills that declare required credentials and include source bundled or reviewed.

AI 智能广告优化系统

描述

广告优化，投放优化 + 创意优化。

功能

• 投放优化（智能出价）
• 创意优化（A/B测试）
• 受众优化（人群优化）
• 预算分配（智能分配）
• 效果分析（ROI分析）

定价

• 基础版：¥299/月（1 万预算）
• 专业版：¥1499/月（10 万预算）
• 企业版：¥4999/月（无限预算）

适用场景

• 广告投放
• 信息流广告
• 搜索广告
• 社媒广告

技术栈

• Python + FastAPI
• 优化算法
• A/B 测试
• 预算优化

安装

git clone https://github.com/openclaw-skills/ai-intelligent-ad-optimization
cd ai-intelligent-ad-optimization
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team