The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill serves as a directory directing the agent to recommend scripts from third-party websites including nilsrooijmans.com, pemavor.com, brainlabsdigital.com, jackfelsted.com, sarahstemen.com, and optmyzr.com. It explicitly instructs the user to paste and authorize this code within their Google Ads account environment.
Evidence: The references/scripts-catalog.md file lists numerous scripts with URLs pointing to these domains. The SKILL.md file provides an 'Installation Process' that directs users to 'Paste the script code' and 'Authorize' it, noting that scripts have 'full account access'.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user-provided descriptions of business problems and account performance data to generate specific script recommendations. It lacks instructions for the agent to use boundary markers or to sanitize untrusted input, creating a surface where malicious instructions could be embedded in user-supplied data.
Ingestion points: User prompts describing business problems or account setups in SKILL.md.
Boundary markers: Absent in the recommendation templates.
Capability inventory: Recommends JavaScript code for execution in the Google Ads platform environment.
Sanitization: No instructions are provided to sanitize or validate the content of the business problem descriptions before processing.

google-ads-scripts