← 返回 Skills 市场
Direct Analysis
作者
nimblemarketingapex-netizen
· GitHub ↗
· v1.0.1
718
总下载
0
收藏
6
当前安装
2
版本数
在 OpenClaw 中安装
/install direct-analysis
功能描述
Анализ рекламных кампаний Яндекс.Директ
使用说明 (SKILL.md)
Direct Analysis
Бот не публикует данные, не меняет кампании без разрешения и экономит токены.
Когда использовать
Когда пользователь спрашивает:
- директ
- реклама
- рекламные кампании
- анализ рекламы Для оценки эффективности рекламных кампаний, CTR, CPC, расходов, конверсий и слабых объявлений.
Шаги
- Получение статистики кампаний:
- Использовать YANDEX_TOKEN и CLIENT_LOGIN
- Определить CTR, CPC, расходы, конверсии
- Анализ слабых объявлений и ключевых слов
- Формирование кратких рекомендаций:
- Оптимизация ставок и бюджета
- Коррекция текста объявлений и CTA
- Предложения по новым сегментам аудитории
安全使用建议
This skill's core functionality (Yandex.Direct analysis) is plausible, but the SKILL.md references YANDEX_TOKEN and CLIENT_LOGIN while the package metadata declares no required env vars and the source/homepage are unknown. Before installing: (1) ask the publisher to disclose source code or a homepage and to formally declare required env vars and the exact API endpoints and scopes; (2) only provide a read-only Yandex token with the minimal scopes needed for stats; (3) prefer installing in an isolated account or environment; (4) if you won't provide credentials, avoid giving this skill access — the current manifest is inconsistent and could prompt the agent to search for or request secrets.
功能分析
Type: OpenClaw Skill
Name: direct-analysis
Version: 1.0.1
The skill declares a dependency on `curl` in `SKILL.md`, granting it network access capabilities. Additionally, it explicitly states its intention to use `YANDEX_TOKEN` and `CLIENT_LOGIN`, which are sensitive credentials. While these capabilities might be necessary for the stated purpose of analyzing Yandex.Direct campaigns, the combination of network access and credential handling, without the actual code to verify its benign usage, represents a significant attack surface and potential for data exfiltration or unauthorized actions if the underlying implementation were malicious or vulnerable. This falls under 'risky capabilities without clear malicious intent'.
能力评估
Purpose & Capability
The skill's stated purpose (Yandex.Direct campaign analysis) matches the steps in SKILL.md. However the SKILL.md explicitly says to 'Use YANDEX_TOKEN and CLIENT_LOGIN' yet the registry metadata lists no required environment variables or primary credential. That mismatch is unexpected and incoherent: a Yandex integration legitimately needs credentials and should declare them.
Instruction Scope
Instructions tell the agent to obtain campaign statistics using YANDEX_TOKEN and CLIENT_LOGIN and to compute CTR/CPC/etc., but they do not specify API endpoints, expected scopes, or how to handle credentials safely. Because env vars are not declared, the agent might look for or attempt to access undeclared environment variables or other context — scope creep risk.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. Required binary is curl, which is reasonable for calling web APIs. No arbitrary downloads or on-disk installs are present.
Credentials
The SKILL.md requires sensitive credentials (YANDEX_TOKEN and CLIENT_LOGIN) but the skill metadata does not declare any required env vars or a primary credential. Asking for advertising-account credentials is proportionate to the stated purpose only if those credentials and scopes are declared and limited; that is not the case here.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent or elevated platform privileges in the manifest. Autonomous invocation is allowed by default but is not combined with other high-risk indicators here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install direct-analysis - 安装完成后,直接呼叫该 Skill 的名称或使用
/direct-analysis触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Обновлено описание кейсов использования: теперь явно перечислены ключевые слова, по которым рекомендуется запускать навык.
- Остальная документация и функциональные шаги остались без изменений.
v1.0.0
direct-analysis 1.0.0 — Initial Release
- First release introducing analysis of Yandex.Direct ad campaigns.
- Evaluates CTR, CPC, expenses, conversions, and highlights weak ads/keywords.
- Provides brief recommendations for budget, bid, and ad text optimization.
- Does not share data or make changes without user consent.
- Requires curl and YANDEX_TOKEN authentication.
元数据
常见问题
Direct Analysis 是什么?
Анализ рекламных кампаний Яндекс.Директ. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 718 次。
如何安装 Direct Analysis?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install direct-analysis」即可一键安装,无需额外配置。
Direct Analysis 是免费的吗?
是的,Direct Analysis 完全免费(开源免费),可自由下载、安装和使用。
Direct Analysis 支持哪些平台?
Direct Analysis 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Direct Analysis?
由 nimblemarketingapex-netizen(@nimblemarketingapex-netizen)开发并维护,当前版本 v1.0.1。
推荐 Skills