google-search-ads-builder
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes information from various external, untrusted sources including competitor websites, review platforms (G2, Capterra), Reddit threads, and Hacker News discussions.
- Ingestion points: Content is retrieved via
web_search,fetch_webpage, the Apify Reddit scraper API, and the Hacker News Algolia API. - Boundary markers: The instructions do not specify the use of delimiters or provide directions for the agent to ignore instructions potentially embedded within the fetched research data.
- Capability inventory: The skill has the capability to perform web searches, make network requests to external APIs, and write strategy documents and CSV files to the filesystem.
- Sanitization: There is no evidence of sanitization or validation of the external content before it is used to generate ad copy and campaign strategies.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to external service APIs for research and data collection.
- It communicates with the Apify API (
api.apify.com) to trigger and fetch data from a Reddit scraper, using a user-provided API token. - It fetches data from the Hacker News Algolia search API (
hn.algolia.com). - These interactions are with well-known technology service providers for their intended functional purpose.
Audit Metadata