ga4-cross-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The README.md file provides instructions to download skill components and scripts from the author's public GitHub repository (fourteenwm/ppc-ai-skills). As these are vendor-provided resources for the skill's installation, they are documented neutrally.
- [COMMAND_EXECUTION]: The script scripts/query_campaign_settings.py constructs Google Ads Query Language (GAQL) queries by embedding the campaign_name variable directly into a query string using an f-string. This pattern is vulnerable to GAQL injection, which could allow a malicious campaign name to alter the query logic or potentially access data from campaigns other than the one intended if the input is not validated before being passed to the script.
Audit Metadata