ads

SUSPICIOUS: The skill’s capabilities fit its Google Ads purpose, but it depends on a non-Google third-party MCP service for reads, auth handling, and write operations that can directly affect ad spend. With no local installer evidence this is not overt malware, but the intermediary data flow, incomplete auth visibility, and financially impactful mutations make it medium risk.