← Back to Skills Marketplace
Direct Analysis
by
nimblemarketingapex-netizen
· GitHub ↗
· v1.0.1
718
Downloads
0
Stars
6
Active Installs
2
Versions
Install in OpenClaw
/install direct-analysis
Description
Анализ рекламных кампаний Яндекс.Директ
README (SKILL.md)
Direct Analysis
Бот не публикует данные, не меняет кампании без разрешения и экономит токены.
Когда использовать
Когда пользователь спрашивает:
- директ
- реклама
- рекламные кампании
- анализ рекламы Для оценки эффективности рекламных кампаний, CTR, CPC, расходов, конверсий и слабых объявлений.
Шаги
- Получение статистики кампаний:
- Использовать YANDEX_TOKEN и CLIENT_LOGIN
- Определить CTR, CPC, расходы, конверсии
- Анализ слабых объявлений и ключевых слов
- Формирование кратких рекомендаций:
- Оптимизация ставок и бюджета
- Коррекция текста объявлений и CTA
- Предложения по новым сегментам аудитории
Usage Guidance
This skill's core functionality (Yandex.Direct analysis) is plausible, but the SKILL.md references YANDEX_TOKEN and CLIENT_LOGIN while the package metadata declares no required env vars and the source/homepage are unknown. Before installing: (1) ask the publisher to disclose source code or a homepage and to formally declare required env vars and the exact API endpoints and scopes; (2) only provide a read-only Yandex token with the minimal scopes needed for stats; (3) prefer installing in an isolated account or environment; (4) if you won't provide credentials, avoid giving this skill access — the current manifest is inconsistent and could prompt the agent to search for or request secrets.
Capability Analysis
Type: OpenClaw Skill
Name: direct-analysis
Version: 1.0.1
The skill declares a dependency on `curl` in `SKILL.md`, granting it network access capabilities. Additionally, it explicitly states its intention to use `YANDEX_TOKEN` and `CLIENT_LOGIN`, which are sensitive credentials. While these capabilities might be necessary for the stated purpose of analyzing Yandex.Direct campaigns, the combination of network access and credential handling, without the actual code to verify its benign usage, represents a significant attack surface and potential for data exfiltration or unauthorized actions if the underlying implementation were malicious or vulnerable. This falls under 'risky capabilities without clear malicious intent'.
Capability Assessment
Purpose & Capability
The skill's stated purpose (Yandex.Direct campaign analysis) matches the steps in SKILL.md. However the SKILL.md explicitly says to 'Use YANDEX_TOKEN and CLIENT_LOGIN' yet the registry metadata lists no required environment variables or primary credential. That mismatch is unexpected and incoherent: a Yandex integration legitimately needs credentials and should declare them.
Instruction Scope
Instructions tell the agent to obtain campaign statistics using YANDEX_TOKEN and CLIENT_LOGIN and to compute CTR/CPC/etc., but they do not specify API endpoints, expected scopes, or how to handle credentials safely. Because env vars are not declared, the agent might look for or attempt to access undeclared environment variables or other context — scope creep risk.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. Required binary is curl, which is reasonable for calling web APIs. No arbitrary downloads or on-disk installs are present.
Credentials
The SKILL.md requires sensitive credentials (YANDEX_TOKEN and CLIENT_LOGIN) but the skill metadata does not declare any required env vars or a primary credential. Asking for advertising-account credentials is proportionate to the stated purpose only if those credentials and scopes are declared and limited; that is not the case here.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent or elevated platform privileges in the manifest. Autonomous invocation is allowed by default but is not combined with other high-risk indicators here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install direct-analysis - After installation, invoke the skill by name or use
/direct-analysis - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Обновлено описание кейсов использования: теперь явно перечислены ключевые слова, по которым рекомендуется запускать навык.
- Остальная документация и функциональные шаги остались без изменений.
v1.0.0
direct-analysis 1.0.0 — Initial Release
- First release introducing analysis of Yandex.Direct ad campaigns.
- Evaluates CTR, CPC, expenses, conversions, and highlights weak ads/keywords.
- Provides brief recommendations for budget, bid, and ad text optimization.
- Does not share data or make changes without user consent.
- Requires curl and YANDEX_TOKEN authentication.
Metadata
Frequently Asked Questions
What is Direct Analysis?
Анализ рекламных кампаний Яндекс.Директ. It is an AI Agent Skill for Claude Code / OpenClaw, with 718 downloads so far.
How do I install Direct Analysis?
Run "/install direct-analysis" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Direct Analysis free?
Yes, Direct Analysis is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Direct Analysis support?
Direct Analysis is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Direct Analysis?
It is built and maintained by nimblemarketingapex-netizen (@nimblemarketingapex-netizen); the current version is v1.0.1.
More Skills