google-meta-ads-ga4-mcp

SUSPICIOUS. The skill’s ad-management purpose is plausible, but its actual trust model centers on an undisclosed third-party hosted MCP server that handles OAuth and stores credentials server-side while enabling financially consequential read-write actions. The main concern is opaque remote trust and credential/data routing, not obvious malware.