google-ad-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted third-party content from Google Ads, creating a potential surface for indirect prompt injection attacks.\n
- Ingestion points:
scripts/search_google_ads.pyfetches ad text (headlines, descriptions) and metadata from Apify's dataset API.\n - Boundary markers: The skill does not implement delimiters or specific instructions for the agent to treat the scraped content as data rather than instructions.\n
- Capability inventory: The tool has the capability to make network requests to the Apify API. It does not perform local filesystem writes or execute system commands using the fetched data.\n
- Sanitization: No sanitization or filtering is applied to the scraped ad content before it is passed to the agent's context.\n- [EXTERNAL_DOWNLOADS]: The skill triggers and fetches data from remote actors on the Apify platform.\n
- The script interacts with
https://api.apify.com/v2to run theapify~web-scraperandxtech~google-ad-transparency-scraperactors. Apify is a well-known service for web automation and data extraction.
Audit Metadata