Ad Campaign Optimizer

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If connected to real ad accounts, the agent could create or modify campaigns that spend money or publish ads without clearly documented safeguards.

Why it was flagged

The skill describes automatically creating paid ads and gives a command with a concrete budget, but the artifacts do not include approval requirements, budget caps, account limits, or rollback guidance.

Skill content
- 自动创建广告(多平台:百度/抖音/微信/小红书...) ... python create_ad.py --platform "抖音" --product 123 --budget 1000
Recommendation

Require explicit user confirmation for every campaign creation, budget change, audience change, and ad launch; add dry-run mode, budget ceilings, platform/account allowlists, and rollback instructions.

What this means

Users may be asked later to provide broad platform access without a clear declaration of what credentials are needed or how they are scoped.

Why it was flagged

The metadata declares no credential requirements, while the advertised multi-platform ad-management actions would normally require delegated access to advertising accounts.

Skill content
Primary credential: none; Required env vars: none; ... 自动创建广告(多平台:百度/抖音/微信/小红书...)
Recommendation

Declare each required platform credential, use least-privilege scopes, separate read-only analytics from write/spend permissions, and document exactly what account actions the skill may perform.

What this means

A user would need to obtain or create unreviewed scripts before the advertised workflow can run, which is risky for account-changing advertising operations.

Why it was flagged

The skill tells users to run helper scripts, but the provided manifest contains only SKILL.md and skill.json with no install spec or code files, so the implementation and provenance of those scripts are not reviewable.

Skill content
python create_ad.py --platform "抖音" --product 123 --budget 1000
python ab_test.py --ad_id 456 --variants 5
python optimize.py --ad_id 456 --target "降低CPC"
Recommendation

Include the referenced scripts in the package or remove the commands; pin and document all dependencies and ensure high-impact scripts are auditable before use.