ads-google
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Google Ads MCP server hosted on GitHub (googleads/google-ads-mcp) for automated data collection. This is a legitimate resource from a well-known technology provider.
- [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill is designed to ingest and analyze external, third-party data.
- Ingestion points: SKILL.md (Step 1 of the Process involves collecting external account data, Change History, and Search Terms Reports).
- Boundary markers: Absent; there are no specific delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: SKILL.md (Integrates with MCP tools including
searchfor GAQL queries; reads local reference files likegoogle-audit.md). - Sanitization: Absent; the skill does not specify any validation or filtering of the ingested advertising data.
Audit Metadata