This repository contains skill instructions, examples, docs, and lightweight validation checks. It does not contain a hosted service, credential manager, or live Amazon Ads client.

Please open a GitHub issue for documentation, safety, or validation problems that do not expose sensitive data.

Do not publish:

• Amazon Ads credentials or refresh tokens.
• Rocketcart credentials, private connection details, or customer workspace identifiers.
• Real account IDs, profile IDs, campaign IDs, ASIN strategy maps, or proprietary account exports.
• Masking registries, raw-to-handle mappings, HMAC secrets or digests, source IDs, raw API readbacks, private execution manifests, or real dry-run fixtures.
• Customer names, email addresses, order data, or business-sensitive metrics.

For sensitive security reports, contact the maintainer privately rather than opening a public issue.

The open-source skills do not execute Amazon Ads changes by themselves. Any live write through Rocketcart MCP or another execution layer must require explicit approval, live preflight, exact entity IDs, current/proposed values, expected impact and risk, readback, and monitoring.

If live state differs from an approved action row, do not execute without refreshed approval.

The case-camouflage-skill package preserves exact KPIs and masks only display-plane labels and identifiers. Public artifacts must pass leakage scanning before publication. Raw data for real-profile dry-runs belongs only in ignored private paths such as private-test-data/ or .private/.

Do not claim production readiness for masked output unless synthetic tests, leakage tests, and read-only real-profile dry-runs pass in the target environment.