cybersecurity
AI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero configuration.
Claude-first, portable paid-media operations for agencies, consultants, and in-house performance teams. Claude Ads turns authorized exports or account reads into source-grounded audits, plans, creative workflows, experiments, monitoring, and reports.
> /plugin marketplace add AgriciDaniel/claude-ads> /plugin install claude-ads@ai-marketing-hub-claude-ads
Repo: AgriciDaniel/claude-ads
What's inside
Claude-first, portable paid-media operations for agencies, consultants, and in-house performance teams.
Claude Ads turns authorized exports or account reads into source-grounded audits, plans, creative workflows, experiments, monitoring, and reports. It is read-only by default. Live changes stay disabled until the exact platform and operation pass approval, idempotency, verification, audit, and rollback gates.
[!NOTE] Claude Ads ships from two homes: the public release at
AgriciDaniel/claude-ads(MIT, no membership required) and the community mirror atAI-Marketing-Hub/claude-ads, where AI Marketing Hub Pro members get early access and direct collaboration.
| Segment | Platforms |
|---|---|
| Search, video, and social | Google Ads, Meta Ads, YouTube Ads, LinkedIn Ads, TikTok Ads, Microsoft Advertising, Reddit Ads, Snapchat Ads, X Ads |
| Commerce and retail media | Apple Ads, Amazon Ads, Pinterest Ads |
Each platform has a focused skill, audit worker, control reference, capability declaration, and testable routing surface. The capability manifest is the authoritative record for live reads and writes.
Standalone installs use /ads. Claude Code plugins are namespaced and use
/claude-ads:ads. Both load the same ads/SKILL.md contract.
| Command | Outcome |
|---|---|
/ads setup | Create the client, account, KPI, privacy, and guardrail profile |
/ads audit [all|platform|scope] | Run a complete or scoped evidence-backed audit |
/ads plan | Build channel, campaign, budget, competitor, and measurement plans |
/ads create | Produce copy, image, video, or product-photo assets |
/ads launch --draft | Draft a campaign mutation plan without changing the account |
/ads monitor | Review pacing, delivery, tracking, fatigue, policy, and performance |
/ads optimize --draft | Draft evidence-backed optimization changes |
/ads experiment | Design or read out a controlled test |
/ads report | Render a validated JSON run bundle |
/ads research refresh | Refresh platform, policy, API, benchmark, and ecosystem evidence |
/ads validate | Validate contracts, runs, capabilities, maturity, or release readiness |
/ads status, /ads next | Show current status and the highest-priority blocker |
Platform shortcuts such as /ads google, /ads meta, /ads amazon, and
/ads reddit route to the matching platform audit.
The GIF shows the original command-discovery experience. The v2 command table above and the platform table are current and authoritative.
Claude Code is the canonical runtime. Codex, Gemini, Cursor, Windsurf, Goose, and compatible Agent Skills hosts can consume the same skill files where their runtime supports them.
Prefer the host's native plugin flow or a tagged release archive with a verified SHA-256 checksum. Never pipe a remote installer directly to a shell.
For Claude Code, the native plugin flow is:
/plugin marketplace add AgriciDaniel/claude-ads
/plugin install claude-ads@ai-marketing-hub-claude-ads
Or install from a local clone of the public repository:
git clone https://github.com/AgriciDaniel/claude-ads.git
cd claude-ads
bash install.sh --source=local
Select another standalone host explicitly:
bash install.sh --target=codex --source=local
bash install.sh --target=gemini --source=local --no-deps
PowerShell uses the same managed ownership model:
git clone https://github.com/AgriciDaniel/claude-ads.git
Set-Location claude-ads
.\install.ps1 -Source local
Managed dependencies support CPython 3.11 and 3.12 on the declared Linux,
macOS, and Windows wheel matrix. Unsupported interpreters fail before the
destination changes. Use --no-deps or -NoDeps for a skill-only install.
Browser capture requires an operator-installed Playwright browser payload. PDF rendering requires the host's WeasyPrint and Pango system libraries. These are documented in the external runtime dependency manifest.
Uninstall only manifest-owned files:
bash uninstall.sh --target=claude
The PowerShell equivalent is uninstall.ps1.
One conductor owns scope, policy, aggregation, and final artifacts. Workers analyze bounded slices and return schema-valid findings. Required-worker failure makes the run partial. It is never silently presented as a complete audit.
The canonical result is versioned JSON. Markdown, HTML, and PDF are renderings of the same validated run bundle.
Controls use pass, fail, unknown, or not_applicable.
See the scoring reference and production
implementation in claude_ads_core/scoring.py.
All adapters are read-only by default. Applying a change requires:
Missing ceilings mean no write. Permanent deletion is not supported in v2. Credentials belong in environment variables, an OS keychain, or an approved secret manager. They never belong in the repository, profiles, reports, or logs.
The public-safe control-plane/ records product boundaries, dated sources,
claims, capabilities, safety rules, privacy rules, ecosystem decisions, and
release requirements.
See the release requirements and publishing policy.
Create a virtual environment and run the complete suite:
python3.12 -m venv .venv
.venv/bin/python -m pip install --no-deps -e .
.venv/bin/python -m pip install --require-hashes --only-binary=:all: -r requirements.lock
.venv/bin/python -m pip install --require-hashes --only-binary=:all: -r requirements-dev.lock
.venv/bin/python -m pip check
.venv/bin/python -m pytest -q
Useful focused checks:
python -m claude_ads_core --version
python -m claude_ads_core validate finding path/to/finding.json
bash -n install.sh uninstall.sh
ads/ main skill, interface metadata, and shared references
skills/ platform and lifecycle skills
agents/ platform, cross-platform, research, and verifier workers
claude_ads_core/ typed contracts, adapters, validation, and scoring
control-plane/ evidence, capability, safety, maturity, and release state
scripts/ browser, creative, reporting, and release helpers
evals/ routing and behavioral evaluation cases
tests/ deterministic, security, installer, and adapter tests
Client data, raw private research, captured prompts, credentials, account exports, and agent transcripts must never enter Git history, reports, or release archives. Keep credentials in environment variables, an OS keychain, or an approved secret manager.
Original Claude Ads code and documentation are available under the MIT License. Third-party APIs, trademarks, documentation, and cited artifacts remain subject to their own terms. Review the source ledger and third-party notices before importing external work.
.claude-plugin/
marketplace.json
plugin.json
.gitattributes
.github/
CODEOWNERS
dependabot.yml
ISSUE_TEMPLATE/
bug_report.yml
config.yml
feature_request.yml
PULL_REQUEST_TEMPLATE.md
release.yml
workflows/
ci.yml
dependabot-automerge.yml
.gitignore
ads/
agents/
openai.yaml
references/
additional-platforms.md
amazon-audit.md
apple-audit.md
automation-tier-classifier.md
benchmarks.md
bidding-strategies.md
budget-allocation.md
compliance-requirements.md
compliance.md
conversion-tracking.md
copy-frameworks.md
creative-source-registry.md
gaql-notes.md
google-audit.md
google-creative-specs.md
image-providers.md
linkedin-audit.md
linkedin-creative-specs.md
mcp-integration.md
meta-ai-stack.md
meta-audit.md
meta-creative-specs.md
microsoft-audit.md
microsoft-creative-specs.md
pinterest-audit.md
platform-specs.md
prompt-patterns.md
reddit-audit.md
scoring-system.md
snapchat-audit.md
status-contract.md
thinking-framework.md
tiktok-audit.md
tiktok-creative-specs.md
voice-to-style.md
x-audit.md
youtube-audit.md
youtube-creative-specs.md
SKILL.md
agents/
AGENTS.md
audit-amazon.md
audit-apple.md
audit-budget.md
audit-creative.md
audit-google.md
audit-linkedin.md
audit-meta.md
audit-microsoft.md
audit-pinterest.md
audit-policy-compliance.md
audit-reddit.md
audit-regulatory-compliance.md
audit-snapchat.md
audit-tiktok.md
audit-tracking.md
audit-x.md
audit-youtube.md
copy-writer.md
creative-strategist.md
format-adapter.md
release-verifier.md
research-worker.md
skill-reviewer.md
source-verifier.md
visual-designer.md
assets/
banner.svg
demo.gif
diagrams/
ads-health-score.svg
architecture.svg
how-it-works.svg
platform-coverage.svg
CHANGELOG.md
CITATION.cff
claude_ads_core/
__init__.py
__main__.py
adapters/
__init__.py
base.py
csv_export.py
mappings_v1.py
native_export.py
cli.py
contracts.py
control_registry.py
models.py
orchestration.py
product_status.py
reporting.py
schemas/
v1/
account-snapshot.schema.json
brand-profile.schema.json
control-definition.schema.json
creative-brief.schema.json
data-lifecycle.schema.json
experiment-artifact.schema.json
finding.schema.json
generation-manifest.schema.json
media-plan.schema.json
monitoring-bundle.schema.json
mutation-plan.schema.json
orchestration-gate.schema.json
orchestration-result.schema.json
orchestration-run.schema.json
orchestration-task.schema.json
report-bundle.schema.json
run-manifest.schema.json
setup-profile.schema.json
workflow-common.schema.json
scoring.py
workflow_contracts.py
workflow_models.py
CLAUDE.md
CODE_OF_CONDUCT.md
CODEX.md
CONTRIBUTING.md
control-plane/
dependency-evidence/
development-linux-cp311.json
development-linux-cp312.json
development-macos-arm-cp311.json
development-macos-arm-cp312.json
development-macos-x86-cp311.json
development-macos-x86-cp312.json
development-windows-cp311.json
development-windows-cp312.json
runtime-linux-cp311.json
runtime-linux-cp312.json
runtime-macos-arm-cp311.json
runtime-macos-arm-cp312.json
runtime-macos-x86-cp311.json
runtime-macos-x86-cp312.json
runtime-windows-cp311.json
runtime-windows-cp312.json
manifests/
capability-manifest.json
claim-ledger.json
control-registry.json
data-lifecycle-policy.json
dependency-inventory.json
ecosystem-dispositions.json
external-runtime-dependencies.json
maturity-status.json
orchestration-policy.json
product-manifest.json
repository-review-ledger.json
review-policy.json
reviews/
code.review.template.json
evidence.review.template.json
licensing.review.template.json
privacy.review.template.json
security.review.template.json
safety-policy.json
scoring-profiles.json
source-ledger.json
PRODUCT_BOUNDARIES.md
PUBLISHING_POLICY.md
README.md
RELEASE_REQUIREMENTS.md
REQUIREMENT_INDEX.md
schemas/
browser-capture-receipt.schema.json
capability-manifest.schema.json
claim-ledger.schema.json
control-registry.schema.json
creative-worker-result.schema.json
data-lifecycle-policy.schema.json
dependency-inventory.schema.json
ecosystem-dispositions.schema.json
egress-sandbox-attestation.schema.json
independent-review-evidence.schema.json
maturity-status.schema.json
orchestration-packet.schema.json
product-status.schema.json
release-gate-report.schema.json
repository-review-ledger.schema.json
review-policy.schema.json
review-trust-bundle.schema.json
safety-policy.schema.json
scoring-profiles.schema.json
source-ledger.schema.json
target-evidence.schema.json
evals/
creative-evals.json
model_eval_gate.py
model_evidence_auth.py
model-eval-contract.json
platform-workflow-routing.json
results/
2026-07-11-codex-forward.json
schemas/
model-eval-trust-bundle.v1.schema.json
model-gate-report.v2.schema.json
model-run-evidence.v2.schema.json
v2-behavior-evals.json
GEMINI.md
install.ps1
install.sh
LICENSE
pyproject.toml
README.md
requirements-dev.lock
requirements-dev.txt
requirements.lock
requirements.txt
scripts/
analyze_landing.py
build_control_registry.py
capture_screenshot.py
fetch_page.py
generate_image.py
generate_report.py
release.py
review_evidence.py
url_utils.py
verify_managed_install.py
verify_target_lock.py
write_install_receipt.py
SECURITY.md
skills/
ads-amazon/
SKILL.md
ads-apple/
SKILL.md
ads-attribution/
SKILL.md
ads-audit/
SKILL.md
ads-budget/
SKILL.md
ads-competitor/
SKILL.md
ads-create/
SKILL.md
ads-creative/
SKILL.md
ads-dna/
SKILL.md
ads-generate/
SKILL.md
ads-google/
SKILL.md
ads-landing/
SKILL.md
ads-launch/
SKILL.md
ads-linkedin/
SKILL.md
ads-math/
SKILL.md
ads-meta/
SKILL.md
ads-microsoft/
SKILL.md
ads-monitor/
SKILL.md
ads-optimize/
SKILL.md
ads-photoshoot/
SKILL.md
ads-pinterest/
SKILL.md
ads-plan/
assets/
agency.md
b2b-enterprise.md
ecommerce-creative.md
ecommerce.md
finance.md
generic.md
healthcare.md
info-products.md
local-service.md
mobile-app.md
real-estate.md
saas.md
SKILL.md
ads-reddit/
SKILL.md
ads-report/
SKILL.md
ads-research/
SKILL.md
ads-server-side-tracking/
SKILL.md
ads-setup/
SKILL.md
ads-snapchat/
SKILL.md
ads-test/
SKILL.md
ads-tiktok/
SKILL.md
ads-validate/
SKILL.md
ads-x/
SKILL.md
ads-youtube/
SKILL.md
SUPPORT.md
tests/
audit/
__init__.py
test_check_coverage.py
test_legacy_creative_surfaces.py
test_remaining_reference_safety.py
test_repository_review_ledger.py
test_scoring_math.py
test_source_grounding.py
conftest.py
core/
__init__.py
test_adapters.py
test_cli.py
test_contracts.py
test_control_registry.py
test_data_lifecycle_policy.py
test_native_exports.py
test_platform_report_contracts.py
test_product_status.py
test_reporting.py
test_scoring_engine.py
test_workflow_contracts.py
fixtures/
check-catalog.yaml
exports/
amazon.csv
apple.csv
google.csv
linkedin.csv
meta.csv
microsoft.csv
pinterest.csv
reddit.csv
snapchat.csv
tiktok.csv
x.csv
youtube.csv
native_exports/
amazon.csv
apple.csv
google.csv
linkedin.csv
meta.csv
microsoft.csv
pinterest.csv
reddit.csv
snapchat.csv
tiktok.csv
x.csv
youtube.csv
reports/
sanitized-report-bundle.json
sanitized-report.html
sanitized-report.md
workflows/
valid-artifacts.json
references/
__init__.py
test_cross_platform_references.py
release/
__init__.py
test_release.py
test_repository_review_release_gate.py
test_review_contracts.py
test_target_lock_verifier.py
routing/
__init__.py
test_behavior_eval_contract.py
test_canonical_behavior_surfaces.py
test_creative_routing.py
test_forward_eval_summary.py
test_model_eval_gate.py
test_platform_workflow_routing.py
... 9 moreAI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero configuration.
AI image generation skill for Claude Code where Claude acts as Creative Director using Google's Gemini Nano Banana models.
Self-organizing AI second brain for Obsidian + Claude Code. Drop any source and Claude reads, links, and files it into one connected knowledge graph of plain Markdown you own. AI note-taking, personal knowledge management (PKM), and an open-source Notion alternative. Based on Karpathy's LLM Wiki pattern.
FAQ
claude-ads is a Claude Code plugin with 33 hand-picked skills for marketing work, indexed on Flowy. Install it with the command on its page. It includes ads-amazon, ads-apple, ads-attribution. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.