google-ads-keywords-for-keywords
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bash script (
search_google_ads_keywords_for_keywords.sh) which in turn usescurlfor network requests andpython3for JSON processing. All command-line arguments are parsed and handled as data, not executed as shell commands, preventing command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
ai-factory.frevana.comwhich is the vendor's own API endpoint as specified in the author context. These requests are for the primary purpose of the skill (fetching keyword data) and follow standard API interaction patterns. - [CREDENTIALS_UNSAFE]: The skill requires a
FREVANA_TOKEN. It correctly encourages users to provide this via environment variables or an explicit flag, and the script includes logic to avoid echoing the token to the output, following secret management best practices.
Audit Metadata