Google Ads
AdvisoryAudited by Static analysis on May 7, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may be able to read Google Ads account data through Maton once you connect the account.
The skill requires a Maton API key and managed OAuth access to a Google Ads account, which is expected for the integration but grants access to sensitive advertising account data.
Access the Google Ads API with managed OAuth authentication... req.add_header('Authorization', f'Bearer {os.environ["MATON_API_KEY"]}')Use only with a Maton account you trust, connect only the intended Google Ads account, and revoke/delete the connection when it is no longer needed.
If misused, API calls could affect Google Ads resources, but the visible instructions require user approval for write actions.
The skill exposes a native API proxy path and acknowledges possible write operations, while also instructing the agent to get approval before creates, updates, or deletes.
https://api.maton.ai/google-ads/{native-api-path} ... All write operations require explicit user approval. Before executing any create, update, or delete call, confirm the target resourcReview customer IDs, GAQL queries, and any proposed create/update/delete actions before approving them.
Installing the CLI adds trust in the external Maton package distribution channel.
The instruction-only skill recommends installing an external global CLI that is not included in the provided artifacts for review.
npm install -g @maton-ai/cli ... brew install maton-ai/cli/maton
Install the CLI only from the official Maton source, keep it updated, and avoid running unverified package versions.
Your Google Ads queries and returned account data may pass through Maton’s service before reaching Google or the agent.
Google Ads API requests and responses flow through Maton as a gateway, which is disclosed and purpose-aligned but important for users to understand.
Maton proxies requests to `googleads.googleapis.com` and automatically injects OAuth and developer tokens.
Check Maton’s privacy and access controls before connecting sensitive advertising accounts.