google-ads
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes the
data_apps_buildtool to generate interactive UI dashboards using Python script templates. These templates import theprefab_uilibrary to render components such as metrics, charts, and data tables. While these scripts are generated from predefined recipes within the skill's reference files, they represent a dynamic execution surface for the platform's UI builder. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the Google Ads API, including campaign names, ad copy, and search terms. This external data represents an untrusted input surface that could potentially contain malicious instructions intended to influence the agent's behavior during report generation or campaign management. To mitigate this risk, the skill enforces several safety protocols: it requires a 'pre-creation summary' to be presented to the user, mandates explicit human approval before any account mutations occur, and ensures all new campaigns are initially created in a 'PAUSED' state.
Audit Metadata