google-ads-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses the
google-ads-mcpsearch tool to execute standard GAQL queries against the Google Ads API for account diagnostics. This is a secure and intended use of the platform's tools.\n- [INDIRECT_PROMPT_INJECTION]: The skill presents an ingestion surface for external data, which is an inherent risk factor for indirect prompt injection.\n - Ingestion points: Performance and configuration data retrieved via the
google-ads-mcptool and manual text exports provided by the user inExport Mode(SKILL.md).\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the ingested data are defined.\n
- Capability inventory: The skill generates markdown reports and updates state within the
workspace/ads/directory (SKILL.md).\n - Sanitization: No explicit sanitization or validation of external data is described before it is used to generate workspace drafts or memory updates.
Audit Metadata