google-ads
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes actions using the
@useclawlink/clitool via shell commands. This behavior is the primary mechanism for querying and mutating Google Ads data. - [EXTERNAL_DOWNLOADS]: Fetches the CLI tool from the official NPM registry during setup and execution. This is a vendor-provided tool for accessing the service.
- [PROMPT_INJECTION]: Potential surface for indirect prompt injection exists due to the ingestion of data from Google Ads reports. 1. Ingestion points: googleads_search_stream_gaql, googleads_get_campaign_by_id, and googleads_get_customer_lists. 2. Boundary markers: None specified in the instructions. 3. Capability inventory: The skill can mutate campaigns and ad groups via the CLI tool. 4. Sanitization: No explicit sanitization or validation of retrieved data is specified in the documentation.
Audit Metadata