google-ads-mcp-setup-guide

SUSPICIOUS: the skill’s purpose and capabilities are mostly aligned and it avoids obvious credential harvesting or covert exfiltration, but it relies on a third-party skills installer to pull additional skills and includes a community-repo test path that broadens trust beyond the stated official MCP setup. This is better classified as a moderate supply-chain/transitive-trust risk than malware.