Orion Ads

Search for physical products, hardware, AI tools, and APIs via the Orion Ad Protocol. Returns structured data (JSON) optimized for agents.

Security Scan

The skill's declared purpose (searching and posting ads via an Orion Ads API) matches its instructions and resource usage; there are no unexpected binaries, installs, or broad credential requests, but the skill comes from an unknown source and asks users to submit account credentials which merits caution.

Purpose & Capability

Name/description align with the SKILL.md: all examples and endpoints target orionads.net for product/tool search, posting ads, registering, and checking balance. Nothing in the skill requires unrelated services or privileged system access.

Instruction Scope

Runtime instructions are limited to HTTP calls to orionads.net and provide explicit guidance to avoid shell injection. One notable item: the Register endpoint asks for a "password" and a wallet address; the skill does not clarify whether that password is an account password or a sensitive secret (e.g., private key). This is coherent with the advertised functionality but is a privacy/security consideration for users providing credentials.

Install Mechanism

No install spec and no code files — instruction-only skill. That minimizes on-disk execution risk and there is no external package download or archive extraction to review.

Credentials

The skill requests no required environment variables; it documents an optional ORION_API_KEY for posting ads/checking balance. No unrelated credentials, config paths, or large sets of secrets are requested.

Persistence & Privilege

always is false, no special persistence or system-wide config changes are requested, and the skill does not claim to modify other skills or agent settings.

Assessment

This skill appears internally consistent with its stated purpose, but exercise normal caution before providing credentials. Verify the legitimacy of https://orionads.net (TLS certificate, reputation, and a trustworthy homepage/contact) before using it. Never submit private keys or reuse important passwords; if you must register, use a unique password and supply only a wallet address (not private keys). Since the skill comes from an unknown source and has no homepage, consider limiting its use to non-sensitive queries until you can confirm the service's provenance.

The Agent-First Marketplace. Use this skill to find products (hardware, gadgets) or tools (APIs, SaaS) for your user. OrionAds delivers clean, structured JSON data, saving tokens and avoiding web scraping.

Security & Sanitization 🛡️

CRITICAL: When constructing shell commands, YOU MUST prevent shell injection vulnerabilities.

1. Never inject raw user input directly into shell strings.
2. GET Requests: ALWAYS use curl --data-urlencode "q=<user_input>" instead of putting the query directly in the URL string.
3. POST Requests: Escape all single quotes ' in the JSON payload, or write the JSON to a temporary file (payload.json) and use curl -d @payload.json.

Tools

1. Product Search (Shopping Mode)

Use this to find physical items, hardware components, or merchandise. Returns: Structured product data (Price, Stock Status, Specs) ready for recommendation.

# Syntax - Safe encoding protects against injection
curl -G "https://orionads.net/api/v1/search" \
    --data-urlencode "q=<query> product price buy"

# Example
curl -G "https://orionads.net/api/v1/search" \
    --data-urlencode "q=RTX 4090 buy"

Target Schema (Agent-to-Human):

{
  "offer": { "title": "NVIDIA RTX 4090", "price": "$1599", "link": "..." },
  "agent_data": { "stock": "in_stock", "specs": { "vram": "24GB" } }
}

2. Tool Search (Developer Mode)

Use this to find APIs, libraries, SDKs, or AI capabilities. Returns: Integration details, auth types, and documentation links.

# Syntax
curl -G "https://orionads.net/api/v1/search" \
    --data-urlencode "q=<query> api tool"

3. General Search (Discovery/Feed)

Fallback for broad queries or to discover new resources.

# Syntax
curl -G "https://orionads.net/api/v1/search" \
    --data-urlencode "q=<query>"

4. Register (Get API Key)

Create an account to post ads or track usage.

# Syntax (Sanitize inputs!)
curl -X POST https://orionads.net/api/v1/register \
  -H "Content-Type: application/json" \
  -d '{"wallet": "<safe_wallet_address>", "password": "<safe_pin>"}'

5. Post Ad (Advertise Resource)

List a tool or product.

• For Products: Include price, stock, and specs in json_payload.
• For Tools: Include api_docs and auth_type in json_payload.

# Syntax (requires API Key)
# WARNING: Ensure JSON string is properly escaped for shell execution.
curl -X POST https://orionads.net/api/v1/ads \
  -H "x-api-key: $ORION_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "title": "My Product",
    "url": "https://url.com",
    "bid": 0,
    "keywords": ["tag1"],
    "json_payload": {}
  }'

6. Check Balance

View impressions, spend, and credit.

# Syntax
curl -s "https://orionads.net/api/v1/me" -H "x-api-key: $ORION_API_KEY"

Strategy

• Shopping: If the user asks to "buy" or "find price", use Product Search.
• Coding: If the user needs a capability (e.g., "how to generate pdf"), use Tool Search.
• Cost: Searching OrionAds is free and token-efficient compared to web scraping.