Ads AttributionSAFE
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.
Overview
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.
e86534039e71OBSERVED · 2026-10-07What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: ads-attribution description: "Audit cross-platform attribution, conversion definitions, reporting windows, GA4, AdServices and AdAttributionKit, MMPs, browser and server events, offline conversions, and platform reconciliation. Use for attribution audit, attribution models, conversion windows, requests to add or total Meta and Google conversions, incompatible reporting-window aggregation, GA4 attribution, MMP review, AppsFlyer, Adjust, Branch, Singular, or cross-platform discrepancies." --- # Attribution Audit 1. Read the main `ads` contract and normalized account snapshots. 2. Declare the business conversion, value, data window, timezone, currency, and decision the attribution analysis must support. 3. Inventory every browser, server, platform, analytics, MMP, offline, and app attribution source with its identity, counting, deduplication, and privacy rules. 4. Reconcile comparable events and explain differences caused by eligibility, view-through rules, consent, modeled data, conversion lag, thresholds, or scope. 5. Separate measurement quality from platform-reported performance. 6. Return findings, contradictions, confidence, missing evidence, and a measurement improvement plan through the common JSON contract. Do not assume one platform is ground truth, add incompatible reports together, or recommend an attribution model without the operator's decision context. ## Comparability gate Reject aggregation until the sources share, or are explicitly normalized to, the same conversion event and value definition, attribution window, click/view scope, counting method, deduplication identity, timezone, currency, attribution model, and modeled-data treatment. Until then, report the values side by side with their definitions; do not compute a total. Example: Meta seven-day conversions and Google thirty-day conversions are incompatible. Refuse to add them, reconcile windows and definitions first, and only aggregate a newly comparable dataset.
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
e86534039e71full audit observations/trust-audit/skill/agricidaniel__ads-attribution.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | e86534039e71 | SAFE | B | 89 | first audit |
Questions
What does the Ads Attribution skill do?
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.
Is Ads Attribution safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Ads Attribution access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (e86534039e71), read on 2026-10-07. The repository is watched, and a new audit runs when it changes — this is the first audit.