Security audit

Ad Manager

Security checks for vulnerabilities and agentic risk

Overview

The skill is a small ad-campaign helper with no bundled code, but it describes automatic budget, bid, and pricing changes without clear user confirmation or rollback boundaries.

Review this skill carefully before installing in an environment connected to real ad accounts. It should ideally run in analysis or recommendation mode by default and ask for explicit confirmation before changing budgets, bids, audiences, pricing, or live campaign status.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: 该技能声明具备“自动调价”“预算分配”“出价优化”等主动控制能力，但文档未明确说明其可能直接修改预算、出价或投放配置，也未提及确认流程、权限边界或回滚机制。在广告投放场景中，这会使用户低估技能的执行后果，导致未经充分确认的资金消耗、投放策略变更或业务损失。

Vague Triggers

Medium

Confidence: 87% confidence
Finding: 该文档将“为 ClawMart 创建一个广告投放计划”和“分析最近一周的广告数据”作为使用方式示例，但没有说明这些是否是明确触发词、适用边界或不适用情形。尤其“分析最近一周的广告数据”属于较常见业务表达，缺少上下文约束时，可能导致技能在普通营销分析对话中被意外触发。

Natural-Language Policy Violations

Low

Confidence: 74% confidence
Finding: 该文件的名称、描述和使用示例全部以中文呈现，未说明是否仅支持中文，也未向用户提供语言或地区选择。若组织要求技能不应无提示地强制特定语言，这种单一语言呈现可能构成语言/locale 策略问题。

Static analysis

No suspicious patterns detected.