ads-multi
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run a local Python script (
.claude/skills/ads/validate.py) to ensure that generated headlines and descriptions comply with Google Ads character limits. - [EXTERNAL_DOWNLOADS]: To provide accurate localization and resolve language-specific URL variants, the skill fetches and analyzes content from user-provided landing pages.
- [PROMPT_INJECTION]: The skill processes external data, creating a surface for potential indirect prompt injection.
- Ingestion points: Ad briefs provided by the user (keywords, USPs) and content retrieved from external landing pages.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the ingested content.
- Capability inventory: The agent is authorized to write CSV output files and execute a local Python script via the Bash tool.
- Sanitization: There is no explicit mention of sanitization or filtering for the external content before it is used to influence the generation of ad copy.
Audit Metadata