Skills/ClawHub/ad-creative-testing

ad-creative-testing@1.0.1

VERIFIED

Publisher claims: "Turn one winning ad into a creative testing plan for TikTok and Meta. Decodes why an ad won (hook, argument, buyer, format), plans concepts that Meta's Andromeda and TikTok treat as genuinely different (buyer × angle × format × first frame, not caption swaps), sets how many creatives to launch, the budget per test and when to judge, writes file and ad names that make results readable, reads hook rate, hold rate, CTR and CPA to find which part failed, and says when to kill, iterate or scale. Use when someone asks how many ads to test, how to make ad variants, why their variants all perform the same, whether an ad is fatigued, when to kill an ad, or how to scale a winner. NOT for producing the videos (use ecommerce-video-ads, ecommerce-video-edit or product-video-hooks) or for media-buying account setup." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher vargai · joined 9 days agoInstalls 75Last detonated 48 min ago
$clawhub install ad-creative-testing
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 82/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
Process kill commandSKILL.md:10 · Process kill command — agent can terminate processesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
CRITICAL
HTML comment carrying imperative instructions to the agentREADME.md:1 · HTML comment carrying imperative instructions to the agentFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈2,006 tok
1 file · 3 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.