google-ads
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard system utilities including
curl,jq,sed,awk, andtrto perform API operations and process data. These operations are restricted to managing campaign configurations and querying reporting data as described in the skill's purpose. - [EXTERNAL_DOWNLOADS]: Communicates exclusively with well-known Google API domains (
googleads.googleapis.comanddatamanager.googleapis.com). These connections are used to fetch campaign data and upload consented audience information. - [CREDENTIALS_UNSAFE]: Demonstrates secure handling of sensitive credentials by utilizing environment variables (
GOOGLE_ADS_TOKEN,GOOGLE_ADS_DEVELOPER_TOKEN) for OAuth and API authentication, rather than hardcoding secrets. - [DATA_EXFILTRATION]: Provides instructions for ingesting user data into Google Ads while enforcing privacy standards, such as mandatory SHA-256 hashing for PII (emails and phone numbers) and requesting explicit user consent before execution.
Audit Metadata