pp-google-ad-manager
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
google-ad-manager-pp-clitool from the author's repositorygithub.com/mvanhorn/printing-press-libraryviago install. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@mvanhorn/printing-press-librarypackage for installation purposes. - [DATA_EXFILTRATION]: The CLI supports a
--deliver webhook:<url>argument, which allows routing tool output to any external URL, presenting a potential exfiltration vector. - [COMMAND_EXECUTION]: The skill involves executing a local binary
google-ad-manager-pp-cliwith arguments provided by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Google Ad Manager API, which is an external and potentially untrusted data source. Ingestion points: API response data from Google Ad Manager. Boundary markers: Not mentioned in the instructions. Capability inventory: Includes file system writes (
--deliver file), network POSTs (--deliver webhook), and inventory modification. Sanitization: Not specified.
Audit Metadata