The Agent Skills Directory

[SAFE]: The skill performs its stated function of finding and replacing text within Google Ads RSA headlines and descriptions, outputting the results to a Google Sheet for manual review and import via Google Ads Editor.
[DATA_EXPOSURE]: The script scripts/rsa_bulk_edit.py reads sensitive credentials from a local google-ads.yaml file. This is a standard and necessary practice for interacting with the Google Ads and Google Sheets APIs, and the credentials are used only for authenticated requests to Google's official endpoints.
[EXTERNAL_DOWNLOADS]: The skill's components are downloaded from the author's public GitHub repository (github.com/fourteenwm). These are verified vendor resources related to the skill's primary function and do not pose a security risk.
[COMMAND_EXECUTION]: The skill uses Bash to download its scripts and Python to execute them. These operations are transparently documented and limited to the skill's defined workflow.
[PROMPT_INJECTION]: While the skill processes external data from Google Ads accounts, it only performs literal text replacement and writes to a spreadsheet. It does not feed untrusted data back into a prompt context in a way that would trigger malicious instructions.

rsa-bulk-edit