schedule-ads

SUSPICIOUS: the skill’s purpose and official AdManage API data flow are broadly coherent, and the command-injection findings look like documentation false positives. However, the skill forwards ADMANAGE_API_KEY to a local black-box executable (./secretcurl) and relies on another opaque local notifier, so credential handling and outbound effects cannot be verified; that makes the overall risk high despite otherwise reasonable ad-management guardrails.