google-ads
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
@useclawlink/clitool vianpxto interact with the Google Ads API. This involves the agent executing shell commands to search, retrieve, and mutate advertising data. - [EXTERNAL_DOWNLOADS]: The skill initiates downloads of the
@useclawlink/clipackage from the NPM registry at runtime usingnpx. This is the intended delivery mechanism for the integration tool provided by the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests data from external Google Ads account resources.
- Ingestion points: Data enters the agent's context through actions such as
googleads_get_campaign_by_id,googleads_get_campaign_by_name, and GAQL queries viagoogleads_search_stream_gaql. - Boundary markers: There are no explicit boundary markers or delimiters defined to separate untrusted external data from the agent's instructions.
- Capability inventory: The skill provides capabilities to write data to the external service, including
googleads_mutate_campaigns,googleads_mutate_ad_groups, andgoogleads_create_customer_list. - Sanitization: There is no evidence of sanitization, filtering, or validation of the retrieved API data before it is processed by the agent.
Audit Metadata