ads-manager
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
adaptyCLI from the official NPM registry. This is a standard and expected operation for a vendor-provided management skill to ensure the necessary tools are available for execution. - [COMMAND_EXECUTION]: It utilizes shell commands to interact with the
adaptyCLI for managing campaigns, ads, and metrics. These operations are directly related to the skill's primary function and are executed within a restricted scope. - [INDIRECT_PROMPT_INJECTION]: There is a functional surface for processing external campaign templates and JSON data. However, the skill provides clear instructions to use
--previewand require user confirmation before any modifications are applied, effectively managing the risk associated with untrusted inputs. - [SAFE]: The skill documents best practices for managing financial resources in Apple Search Ads, including idempotency keys to prevent duplicate spending and mandatory human-in-the-loop checkpoints before making changes.
Audit Metadata