Trust Assessment
google-ads received a trust score of 85/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 1 finding: 0 critical, 1 high, 0 medium, and 0 low severity. Key findings include Credential Exposure via Config File Catting.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on August 1, 2026 (commit a4d31ad1). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Credential Exposure via Config File Catting The skill instructions suggest running `cat ~/.google-ads.yaml` to check the configuration. This command outputs the entire Google Ads configuration file, which contains highly sensitive secrets such as developer tokens, client IDs, client secrets, and refresh tokens, exposing them to the terminal logs and the LLM context. Avoid printing the contents of credential files. Instead of `cat`, verify the file's existence using `test -f ~/.google-ads.yaml` or parse/validate it programmatically without printing sensitive fields. | LLM | SKILL.md:72 |
Scan History
Embed Code
[](https://skillshield.io/report/d824fa3c2d499dca)
Powered by SkillShield