← Back to Skills Marketplace
892
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install skill-amazon-ads-optimizer
Description
Amazon Ads API v3 skill for OpenClaw agents. List profiles, manage Sponsored Products campaigns, view budgets and performance. Works with any advertiser acco...
Usage Guidance
This skill appears to do exactly what it says: exchange your LWA refresh token for an access token and call Amazon Ads endpoints. Before installing, verify the source (the registry entry has no homepage and owner ID looks opaque). Protect the credentials file (amazon-ads-api.json) — use strict filesystem permissions, avoid committing it to git, or consider using a secret manager or environment-provided secrets instead of a disk file. If you need higher assurance, inspect the included scripts yourself (ads.js is short and readable) and run the tool in an isolated environment (local container or dedicated machine).
Capability Analysis
Type: OpenClaw Skill
Name: skill-amazon-ads-optimizer
Version: 1.0.0
The skill is classified as suspicious due to a significant arbitrary file write vulnerability in `scripts/ads.js`. The script uses `fs.writeFileSync` with the `--out` command-line argument, which directly takes a user-provided file path. If an attacker can control the arguments passed to this script (e.g., via prompt injection against the OpenClaw agent), they could write arbitrary data to any file on the system, potentially leading to remote code execution or system compromise. While the stated purpose of saving campaign data is benign, the lack of input sanitization for the output path creates a high-risk exploit vector. All network calls are to legitimate Amazon API endpoints, and there is no evidence of intentional data exfiltration or other malicious behavior.
Capability Assessment
Purpose & Capability
The name/description say Amazon Ads API v3 and the included script implements LWA token exchange, profile listing, and Sponsored Products campaign calls to advertising-api.amazon.com (and regional endpoints). Required binaries (node) and the credential fields described in SKILL.md (lwaClientId, lwaClientSecret, refreshToken, profileId, region) align with the Ads API purpose.
Instruction Scope
SKILL.md instructs the user to create a local credentials JSON (amazon-ads-api.json) and optionally set AMAZON_ADS_PATH; runtime instructions only call Amazon endpoints and run the included Node script. Note: the skill asks you to store sensitive secrets on disk (client secret and refresh token) — exercise care protecting that file (permissions, do not check into VCS).
Install Mechanism
This is instruction-only with an included Node script; there is no install spec, no external downloads, and no archives extracted. That keeps the install surface minimal.
Credentials
The only sensitive data required are Ads-specific credentials (LWA client id/secret and refresh token) and profileId, which are necessary to obtain tokens and call the Ads API. No unrelated credentials, secrets, or system-level config paths are requested. The optional AMAZON_ADS_PATH env var is reasonable and scoped to locating the credentials file.
Persistence & Privilege
The skill does not request permanent 'always' inclusion and does not modify other skills or system settings. It reads a local credentials file and can write output only when the user supplies an --out filename; no elevated persistence is requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-amazon-ads-optimizer - After installation, invoke the skill by name or use
/skill-amazon-ads-optimizer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release.
- Manage Amazon Sponsored Products campaigns from OpenClaw agents
- List profiles, view campaigns, check budgets, and pull performance data
- Includes CLI scripts for common operations (profiles, campaigns, summary)
- Requires setup of LWA credentials and profile ID
- Supports North America, Europe, and Far East regions
v1.0.1
Renamed slug for amazon search discoverability
Metadata
Frequently Asked Questions
What is Skill Amazon Ads Optimizer?
Amazon Ads API v3 skill for OpenClaw agents. List profiles, manage Sponsored Products campaigns, view budgets and performance. Works with any advertiser acco... It is an AI Agent Skill for Claude Code / OpenClaw, with 892 downloads so far.
How do I install Skill Amazon Ads Optimizer?
Run "/install skill-amazon-ads-optimizer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Skill Amazon Ads Optimizer free?
Yes, Skill Amazon Ads Optimizer is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Skill Amazon Ads Optimizer support?
Skill Amazon Ads Optimizer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Skill Amazon Ads Optimizer?
It is built and maintained by Zero2Ai (@zero2ai-hub); the current version is v1.0.0.
More Skills