schedule-ads

SUSPICIOUS: The skill’s ad-management purpose broadly matches its API calls, file writes, and required API key, and the network target is AdManage’s official API. However, it performs autonomous spend-affecting actions and routes the credential through an opaque local executable (./secretcurl) whose trust and behavior are not verifiable from the provided evidence, creating a high security risk even without clear proof of malicious intent.