Ai Intelligent Ad Optimization

广告优化，投放优化 + 创意优化。

Security Scan

The skill's description and instructions generally match an ad-optimization service, but the package omits expected declarations (no required binaries or credentials) while the SKILL.md tells users to clone and run remote code — a coherence and supply-chain risk.

Purpose & Capability

Name/description (ad optimization) align with the SKILL.md features and tech stack (Python/FastAPI). However the skill declares no required binaries or environment credentials, yet the README instructs running git/pip/python and the service would reasonably need ad-platform API keys. Also the SKILL.md embedded version (1.0.2) differs from the registry version (1.0.3). These omissions are inconsistent with the stated purpose.

Instruction Scope

The SKILL.md explicitly instructs cloning a GitHub repo and running pip install and python app.py. That directs the operator/agent to fetch and execute remote code (not bundled with the skill). The instructions do not mention which credentials or configuration are required (e.g., ad platform API keys), nor do they limit what code will run, increasing the risk of executing unexpected behavior.

Install Mechanism

There is no declared install spec in the registry, but the SKILL.md instructs a git clone from GitHub and running the resulting code. Pulling and executing code at install/run time from an external repo is a moderate-to-high supply-chain risk unless the repo and release are verified. Using GitHub is better than an arbitrary IP/shortener, but the skill package itself does not include or declare provenance or pinned release artifacts.

Credentials

The skill declares no required environment variables or primary credential, yet realistic operation (integrating with ad platforms) normally requires API keys / tokens. The absence of declared credentials is disproportionate and leaves unclear where sensitive credentials would be provided or stored.

Persistence & Privilege

always is false and model invocation is allowed (normal). The skill does not request permanent presence or system-wide configuration changes in the package metadata.

Scan Findings in Context

[no_regex_matches] unexpected: The regex-based scanner had no code to analyze (instruction-only skill). The absence of findings is not evidence of safety because the SKILL.md tells users to fetch and execute external code.

What to consider before installing

This skill is suspicious because the package omits expected declarations yet tells you to clone and run code from GitHub. Do not run the install commands blindly. Before installing: (1) inspect the referenced GitHub repository (requirements.txt, app.py, and any scripts) to see what will execute; (2) verify the repo owner and commit/release hashes; (3) run the code in a disposable/sandbox environment; (4) confirm what API keys or credentials the app requires and how they are stored; and (5) ask the publisher to add a proper install spec, explicit required binaries (git, python, pip), and declared environment variables for any ad-platform credentials. If you want, provide the GitHub repo URL or its contents and I can re-evaluate more precisely.

AI 智能广告优化系统

描述

广告优化，投放优化 + 创意优化。

功能

• 投放优化（智能出价）
• 创意优化（A/B测试）
• 受众优化（人群优化）
• 预算分配（智能分配）
• 效果分析（ROI分析）

定价

• 基础版：¥299/月（1 万预算）
• 专业版：¥1499/月（10 万预算）
• 企业版：¥4999/月（无限预算）

适用场景

• 广告投放
• 信息流广告
• 搜索广告
• 社媒广告

技术栈

• Python + FastAPI
• 优化算法
• A/B 测试
• 预算优化

安装

git clone https://github.com/openclaw-skills/ai-intelligent-ad-optimization
cd ai-intelligent-ad-optimization
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team