google-ads-mcp

SUSPICIOUS: The skill's purpose matches Google Ads MCP setup, and the credentials requested are relevant, but it asks users to install mutable third-party code directly from a personal GitHub repo and then provide high-value OAuth/API credentials to it. The write-capable toolset also enables consequential account changes, so the overall risk is high even without direct evidence of malicious exfiltration.