← 返回 Skills 市场
bin-huang

Pinterest Ads CLI

作者 Bin-Huang · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
85
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pinterest-ads-cli
功能描述
Pinterest Ads data analysis and reporting via pinterest-ads-cli. Use when the user wants to check Pinterest ad performance, pull campaign/ad group/ad stats,...
安全使用建议
This skill appears to be a wrapper around a Pinterest CLI and its commands are coherent, but the bundle has two practical problems: (1) the SKILL.md requires a Pinterest OAuth token (PINTEREST_ADS_ACCESS_TOKEN or a credentials file) but the skill metadata does not declare that requirement, and (2) it tells you to install a global npm package without providing a trusted source URL or homepage. Before installing or running it: verify the npm package name and publisher on npmjs.com (or prefer installing locally rather than -g), restrict the OAuth token scopes to the minimum needed, store tokens in a secure location, and consider running the CLI manually to confirm outputs. If you plan to let an autonomous agent use this skill, require the author to update the metadata to declare the env var and provide a verified install URL or repository so you can audit the package; the current omissions are sloppy and increase risk but don't by themselves indicate malicious intent.
功能分析
Type: OpenClaw Skill Name: pinterest-ads-cli Version: 1.0.0 The pinterest-ads-cli skill (SKILL.md, _meta.json) is a legitimate tool designed for Pinterest Ads data analysis and reporting. It provides comprehensive instructions for an AI agent to use a real, documented CLI tool to query campaigns, analytics, audiences, and billing data via the Pinterest API v5. The skill follows standard security practices for handling OAuth2 credentials (using environment variables or local config files) and includes helpful error handling and workflow guidance. No indicators of malicious intent, data exfiltration, or high-risk vulnerabilities were found.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
The SKILL.md describes a read-only Pinterest Ads CLI and the commands and scopes (ads:read, catalogs:read, billing:read, etc.) match that purpose. However the skill metadata declares no required environment variables or primary credential even though the runtime instructions explicitly require a Pinterest OAuth access token (PINTEREST_ADS_ACCESS_TOKEN or ~/.config/pinterest-ads-cli/credentials.json). This metadata omission is inconsistent and should be corrected.
Instruction Scope
Runtime instructions are limited to running the pinterest-ads-cli commands, guidance for authentication, and CLI options. The instructions reference only a credential file inside ~/.config/pinterest-ads-cli and an environment variable for the token — nothing else on the system is requested or read by the prose.
Install Mechanism
There is no install spec in the skill bundle (lowest risk), but the SKILL.md instructs the user to run 'npm install -g pinterest-ads-cli'. Installing a global npm package runs arbitrary code from the npm registry and is higher risk than an instruction-only skill. The skill does not provide a verified homepage, release URL, or checksum; users should verify the npm package author and source before installing globally.
Credentials
The only credential the tool needs (Pinterest OAuth access token) is reasonable for the described functionality, but the skill metadata does not declare it. The SKILL.md states credentials are resolved from an env var (PINTEREST_ADS_ACCESS_TOKEN) or a credentials file at ~/.config/pinterest-ads-cli/credentials.json — the agent (or user) may inadvertently expose that token if not careful. The lack of declared required env vars in the metadata is a notable mismatch.
Persistence & Privilege
The skill does not request always: true, does not include install-time hooks in the bundle, and is instruction-only. There is no requested persistent elevated privilege in the skill manifest.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pinterest-ads-cli
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pinterest-ads-cli 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of pinterest-ads-cli, a CLI tool for Pinterest Ads data analysis and reporting. - Query ad accounts, campaigns, ad groups, ads, keywords, audiences, customer lists, and conversion tags. - Analyze billing profiles and review product catalogs, feeds, and product groups. - Access trending Pinterest search terms and analytics with attribution windows. - All commands output JSON; supports pagination and sorting. - Requires configuration of a Pinterest OAuth2 access token with appropriate scopes. - Read-only access; supports inspection, reporting, and analytics (no write features).
元数据
Slug pinterest-ads-cli
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Pinterest Ads CLI 是什么?

Pinterest Ads data analysis and reporting via pinterest-ads-cli. Use when the user wants to check Pinterest ad performance, pull campaign/ad group/ad stats,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 85 次。

如何安装 Pinterest Ads CLI?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pinterest-ads-cli」即可一键安装,无需额外配置。

Pinterest Ads CLI 是免费的吗?

是的,Pinterest Ads CLI 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Pinterest Ads CLI 支持哪些平台?

Pinterest Ads CLI 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pinterest Ads CLI?

由 Bin-Huang(@bin-huang)开发并维护,当前版本 v1.0.0。

💬 留言讨论