google-meta-ads-ga4-mcp

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s ad-management capabilities broadly match its stated purpose, but the actual trust boundary is a third-party hosted MCP service that stores OAuth credentials server-side and mediates all read-write operations across multiple ad platforms. That is a coherent design for a hosted connector, but it creates a significant data-flow and account-control risk that users must fully trust.

Confidence: 90%Severity: 68%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:34 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fgoogle-meta-ads-ga4-mcp%2F@d53a45c2abd032ae76288f5a91c49ae01cbcb27fdbbdf4b9b7b0b2b942f94e3e
Security Audit — socket — google-meta-ads-ga4-mcp