google-ads
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the official Google Ads API via
googleads.googleapis.com, which is a well-known and trusted service. Network activity is limited to this domain for reporting purposes. - [SAFE]: Sensitive credentials, including the OAuth token and developer token, are managed through environment variables (
$GOOGLE_ADS_TOKEN,$GOOGLE_ADS_DEVELOPER_TOKEN), adhering to secure secret management practices. - [SAFE]: Command execution is restricted to standard data retrieval via
curland JSON parsing viajq, with no evidence of malicious command injection or persistence mechanisms. - [SAFE]: While the skill ingests external data from the Google Ads API (such as campaign names), this represents a standard reporting interface with a negligible risk of indirect prompt injection.
Audit Metadata