google-ad-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts (
scripts/search_google_ads.py) that perform network operations to interact with Apify APIs and scrape content from the Google Ads Transparency Center. - [EXTERNAL_DOWNLOADS]: The skill makes HTTP POST and GET requests to
api.apify.comandapi.gooseworks.aito trigger and retrieve results from Apify actors (burbn/google-ads-searchandapify/web-scraper). These are well-known services for the intended task of web scraping. - [DATA_EXPOSURE]: The skill requires an
APIFY_API_TOKENorGOOSEWORKS_API_KEY. It correctly encourages users to provide these via environment variables rather than hardcoding them. The script accesses these environment variables at runtime. - [DYNAMIC_EXECUTION]: The script
search_google_ads.pycontains a JavaScriptpageFunctionthat is sent to Apify'sweb-scraperactor. This code is executed in a remote headless browser managed by Apify to extract advertiser information. This is a standard pattern for the Apify platform and does not pose a direct threat to the local execution environment.
Audit Metadata