← Back to Skills Marketplace
bin-huang

Pinterest Ads CLI

by Bin-Huang · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
85
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install pinterest-ads-cli
Description
Pinterest Ads data analysis and reporting via pinterest-ads-cli. Use when the user wants to check Pinterest ad performance, pull campaign/ad group/ad stats,...
Usage Guidance
This skill appears to be a wrapper around a Pinterest CLI and its commands are coherent, but the bundle has two practical problems: (1) the SKILL.md requires a Pinterest OAuth token (PINTEREST_ADS_ACCESS_TOKEN or a credentials file) but the skill metadata does not declare that requirement, and (2) it tells you to install a global npm package without providing a trusted source URL or homepage. Before installing or running it: verify the npm package name and publisher on npmjs.com (or prefer installing locally rather than -g), restrict the OAuth token scopes to the minimum needed, store tokens in a secure location, and consider running the CLI manually to confirm outputs. If you plan to let an autonomous agent use this skill, require the author to update the metadata to declare the env var and provide a verified install URL or repository so you can audit the package; the current omissions are sloppy and increase risk but don't by themselves indicate malicious intent.
Capability Analysis
Type: OpenClaw Skill Name: pinterest-ads-cli Version: 1.0.0 The pinterest-ads-cli skill (SKILL.md, _meta.json) is a legitimate tool designed for Pinterest Ads data analysis and reporting. It provides comprehensive instructions for an AI agent to use a real, documented CLI tool to query campaigns, analytics, audiences, and billing data via the Pinterest API v5. The skill follows standard security practices for handling OAuth2 credentials (using environment variables or local config files) and includes helpful error handling and workflow guidance. No indicators of malicious intent, data exfiltration, or high-risk vulnerabilities were found.
Capability Tags
requires-oauth-token
Capability Assessment
Purpose & Capability
The SKILL.md describes a read-only Pinterest Ads CLI and the commands and scopes (ads:read, catalogs:read, billing:read, etc.) match that purpose. However the skill metadata declares no required environment variables or primary credential even though the runtime instructions explicitly require a Pinterest OAuth access token (PINTEREST_ADS_ACCESS_TOKEN or ~/.config/pinterest-ads-cli/credentials.json). This metadata omission is inconsistent and should be corrected.
Instruction Scope
Runtime instructions are limited to running the pinterest-ads-cli commands, guidance for authentication, and CLI options. The instructions reference only a credential file inside ~/.config/pinterest-ads-cli and an environment variable for the token — nothing else on the system is requested or read by the prose.
Install Mechanism
There is no install spec in the skill bundle (lowest risk), but the SKILL.md instructs the user to run 'npm install -g pinterest-ads-cli'. Installing a global npm package runs arbitrary code from the npm registry and is higher risk than an instruction-only skill. The skill does not provide a verified homepage, release URL, or checksum; users should verify the npm package author and source before installing globally.
Credentials
The only credential the tool needs (Pinterest OAuth access token) is reasonable for the described functionality, but the skill metadata does not declare it. The SKILL.md states credentials are resolved from an env var (PINTEREST_ADS_ACCESS_TOKEN) or a credentials file at ~/.config/pinterest-ads-cli/credentials.json — the agent (or user) may inadvertently expose that token if not careful. The lack of declared required env vars in the metadata is a notable mismatch.
Persistence & Privilege
The skill does not request always: true, does not include install-time hooks in the bundle, and is instruction-only. There is no requested persistent elevated privilege in the skill manifest.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install pinterest-ads-cli
  3. After installation, invoke the skill by name or use /pinterest-ads-cli
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of pinterest-ads-cli, a CLI tool for Pinterest Ads data analysis and reporting. - Query ad accounts, campaigns, ad groups, ads, keywords, audiences, customer lists, and conversion tags. - Analyze billing profiles and review product catalogs, feeds, and product groups. - Access trending Pinterest search terms and analytics with attribution windows. - All commands output JSON; supports pagination and sorting. - Requires configuration of a Pinterest OAuth2 access token with appropriate scopes. - Read-only access; supports inspection, reporting, and analytics (no write features).
Metadata
Slug pinterest-ads-cli
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Pinterest Ads CLI?

Pinterest Ads data analysis and reporting via pinterest-ads-cli. Use when the user wants to check Pinterest ad performance, pull campaign/ad group/ad stats,... It is an AI Agent Skill for Claude Code / OpenClaw, with 85 downloads so far.

How do I install Pinterest Ads CLI?

Run "/install pinterest-ads-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Pinterest Ads CLI free?

Yes, Pinterest Ads CLI is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Pinterest Ads CLI support?

Pinterest Ads CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Pinterest Ads CLI?

It is built and maintained by Bin-Huang (@bin-huang); the current version is v1.0.0.

💬 Comments