skills/vm0-ai/vm0-skills/google-ads/Gen Agent Trust Hub

google-ads

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard system utilities including curl, jq, sed, awk, and tr to perform API operations and process data. These operations are restricted to managing campaign configurations and querying reporting data as described in the skill's purpose.
  • [EXTERNAL_DOWNLOADS]: Communicates exclusively with well-known Google API domains (googleads.googleapis.com and datamanager.googleapis.com). These connections are used to fetch campaign data and upload consented audience information.
  • [CREDENTIALS_UNSAFE]: Demonstrates secure handling of sensitive credentials by utilizing environment variables (GOOGLE_ADS_TOKEN, GOOGLE_ADS_DEVELOPER_TOKEN) for OAuth and API authentication, rather than hardcoding secrets.
  • [DATA_EXFILTRATION]: Provides instructions for ingesting user data into Google Ads while enforcing privacy standards, such as mandatory SHA-256 hashing for PII (emails and phone numbers) and requesting explicit user consent before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 07:13 AM
Security Audit — agent-trust-hub — google-ads