ppc-campaign-strategist
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon data from external sources, which constitutes a surface for indirect prompt injection.
- Ingestion points: The agent is directed to pull live account data, including account summaries, campaign lists, and auction insights from Google, Microsoft, and Amazon Ads platforms (SKILL.md).
- Boundary markers: There are no instructions provided to the agent to treat external data as untrusted or to use delimiters to separate data from instructions.
- Capability inventory: The skill encourages the use of MCP tools to execute structural changes, such as campaign creation, budget reallocation, and bid strategy adjustments.
- Sanitization: The skill lacks any requirement for validating, filtering, or sanitizing the external data retrieved via API integrations.
Audit Metadata