Paid advertising decisions can rely on inflated attribution, incomplete measurement, or unsafe placements. This skill reviews exported evidence against a structured ROAS framework and returns a clear gate decision.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "ad-account-auditor" from https://skillstore.io/skills/aaron-he-zhu-ad-account-auditor.md and its manifest at https://skillstore.io/api/skills/aaron-he-zhu-ad-account-auditor/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
All 39 static findings are false positives caused by Markdown code formatting, static documentation links, metadata URLs, and fixed reference paths. The reviewed instructions limit the skill to assessment, require explicit authorization before persistence, and prohibit ad-account mutations without separate approval. No prompt injection, credential collection, data exfiltration, or arbitrary command execution evidence was found.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
aaron-he-zhu. (2026). ad-account-auditor security audit report (audit version 10) [Author version 19.0.0]. Skillstore. https://skillstore.io/skills/aaron-he-zhu-ad-account-auditor/audits/10
BibTeX citation
@techreport{aaron-he-zhu-aaron-he-zhu-ad-account-auditor-2026,
author = {aaron-he-zhu},
title = {ad-account-auditor security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/aaron-he-zhu-ad-account-auditor/audits/10},
note = {Author version 19.0.0}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ad-account-auditor security audit report (audit version 10)"
version: "19.0.0"
type: report
authors:
- name: "aaron-he-zhu"
date-released: "2026-07-26"
url: "https://skillstore.io/skills/aaron-he-zhu-ad-account-auditor/audits/10"
identifiers:
- type: other
value: "skillstore:aaron-he-zhu-ad-account-auditor:audit:10"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this scoreEvidence Confidence: Medium
41
Architecture
100
Maintainability
87
Content
67
Community
91
Spec Compliance
What You Can Build
Approve budget growth
Review measurement and incrementality evidence before increasing spend on a paid-media portfolio.
Investigate weak ROAS
Identify likely attribution, duplication, placement, or economics issues in an underperforming account.
Prepare an audit handoff
Create an evidence-based account review with gaps, priorities, owners, and rerun conditions.
Try These Prompts
Start a basic audit
Audit this paid advertising account for direct response. I will provide campaign exports, conversion data, currency, attribution window, conversion lag, and CAC limit.
Check launch readiness
Review this account before launch. Use the direct-response profile and identify any missing evidence, verified vetoes, and the correct SHIP, FIX, BLOCK, or UNDECIDED outcome.
Assess incrementality
Audit this portfolio with the incremental-profit profile. Compare the holdout results and deduplicated order-ID exports against the stated margin, payback, attribution window, and conversion lag.
Request an executive report
Run a complete ROAS audit using the supplied exports. Present business impact, evidence quality, 20-item scoring, verified controls, unknowns, prioritized owners, and a rerun condition. Do not change account settings.
Best Practices
Provide normalized exports with dates, IDs, currency, attribution windows, and conversion lag.
Use own-data outcomes and holdout evidence when available instead of relying only on platform reporting.
Treat missing required evidence as Unknown and resolve it before making scaling decisions.
Avoid
Do not treat platform-reported ROAS as proof of incremental profit.
Do not compare channels before normalizing currency, windows, lag, and outcome IDs.
Do not change campaigns or budgets based on an audit without separate explicit approval.
Frequently Asked Questions
What data should I provide?
Provide delivery, spend, conversion, economics, attribution, placement, and change-history exports when available.
Can this skill change my advertising account?
No. It is an assessment skill and does not enable campaigns, change bids, upload audiences, or scale budgets.
What happens when evidence is missing?
The skill marks the related item as Unknown and may return UNDECIDED instead of inferring a result.
Does a high ROAS guarantee a SHIP result?
No. The audit also checks measurement integrity, incrementality, safety, claims, policy, and operating quality.
What does BLOCK mean?
BLOCK means a required control has a verified failure, such as material attribution inflation or a safety breach.
Can it assess incremental profit?
Yes, when you provide a suitable holdout, geo split, or causal-test evidence and declared business constraints.