mcc-hack-audit
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads its operational scripts and documentation from the author's GitHub repository (
github.com/fourteenwm/ppc-ai-skills). This is the intended method for deploying the tool's logic. - [REMOTE_CODE_EXECUTION]: The installation process involves downloading a Python script from a remote source and executing it locally. As the source is the official repository of the skill's author, this is a standard and expected deployment pattern for this tool.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to run the audit script. The execution is directed at the downloaded Python file to perform the account tree walk and link analysis using official Google Ads API libraries. - [SAFE]: Analysis of the Python code and skill instructions confirms that behavior aligns with the stated security audit purpose. It employs safe YAML loading (safe_load) and standard credential management for Google APIs.
Audit Metadata