admob-ads-and-consent
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strict environment separation, ensuring production AdMob IDs never reach development builds and test ads never reach production through validated configuration guards and binary ID checks.
- [SAFE]: Sensitive AdMob identifiers are managed via configuration files with placeholders, preventing hardcoding in logic files.
- [SAFE]: Repository scanning tools (check-ads.mjs) include security features that skip internal agent folders and sensitive system directories like .git.
- [SAFE]: The refresh-skadnetwork.ts script fetches identifiers from official Google developer documentation and includes integrity checks to validate the content before processing.
- [SAFE]: The ad lifecycle logic enforces mandatory Google UMP consent and Apple ATT prompts before any ad initialization or request occurs.
Audit Metadata