Hologres Ad Campaign

PassAudited by ClawScan on May 14, 2026.

Overview

This skill is coherent for Hologres-based ad video generation and ROI simulation, but users should review its database writes, cloud AI data flow, OSS role access, and persistent Dynamic Table setup before use.

Install only from trusted sources, use a dedicated Hologres schema and OSS prefix, grant a least-privilege RAM role, review generated SQL before running it, and remove the auto-refresh Dynamic Table when finished.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can create and update Hologres tables and campaign simulation data.

Why it was flagged

The skill explicitly expects write-capable SQL execution and Dynamic Table creation. This is central to the advertised Hologres workflow, but it can modify the user's database environment.

Skill content
All SQL execution and Dynamic Table operations depend on `hologres-cli` commands (`hologres sql run --write`, `hologres dt create`).
Recommendation

Run it in a dedicated database/schema, review generated SQL first, and avoid using production tables unless intended.

What this means

Users depend on the integrity of the external `hologres-cli` package they install.

Why it was flagged

The skill requires installing an external CLI package, but the package version is not pinned and there is no install spec for ClawScan to review.

Skill content
pip install hologres-cli
Recommendation

Install `hologres-cli` from a trusted source and consider pinning a known-good version.

What this means

The configured role may allow reading source materials and writing generated images/videos in OSS.

Why it was flagged

The skill asks for an OSS RAM role ARN so Hologres AI functions can access object storage. This is expected for the workflow, but it is delegated storage authority.

Skill content
RAM Role ARN | 访问 OSS 的角色 | "acs:ram::role/xxx"
Recommendation

Use a least-privilege RAM role limited to the intended bucket and prefixes.

What this means

Product descriptions, prompts, and selected OSS materials may be processed by cloud AI services and stored back to OSS.

Why it was flagged

The SQL templates pass product materials and prompts to Hologres AI model functions and reference OSS files through a RAM role. This is disclosed and purpose-aligned, but it is a cloud data flow involving user-provided assets.

Skill content
ai_gen('wan2_6-r2v-flash', json_build_object(... 'reference_urls', array[material1, material2] ...), to_file(material1, '{{OSS Region}}', '{{RAM Role ARN}}'))
Recommendation

Use only materials approved for cloud AI processing, and confirm the Hologres/AI model region and data-handling policy.

What this means

The Dynamic Table may continue refreshing and consuming database resources until disabled or removed.

Why it was flagged

The skill creates an auto-refreshing Dynamic Table that can continue operating after the immediate task. This is disclosed for real-time ROI analysis, but it is persistent database behavior.

Skill content
CREATE DYNAMIC TABLE IF NOT EXISTS dt_campaign_performance WITH (auto_refresh_enable = true, freshness = '1 minutes', refresh_mode = 'incremental')
Recommendation

Drop or disable the Dynamic Table when the campaign simulation is no longer needed.