pp-google-ads

SUSPICIOUS: the skill is largely aligned with its stated Google Ads purpose and uses proportionate Google Ads credentials, but it carries medium risk because it installs unpinned binaries from a personal GitHub repo, supports arbitrary webhook delivery of outputs, and enables high-impact mutating Ads actions and MCP registration. No clear evidence of credential theft, covert behavior, or incompatible data flows was found.