google-ads

Security checks across malware telemetry and agentic risk

Overview

This is an instruction-only Google Ads guidance skill with no code or credential access, though users should handle its customer-data tracking recommendations carefully.

This appears safe to install as an instruction-only Google Ads guide. Before acting on its recommendations, review any ad-spend or campaign changes yourself, and be especially careful with Customer Match, remarketing, enhanced conversions, or CRM import workflows that use customer data.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI07: Insecure Inter-Agent Communication
Low
What this means

If applied carelessly, customer lists or CRM conversion data could be shared with Google Ads without proper authorization, consent, or privacy controls.

Why it was flagged

The skill advises using customer/audience lists and CRM conversion data with Google Ads. This is purpose-aligned for ad attribution and optimization, but it crosses a provider data boundary and can involve sensitive customer data.

Skill content
Signals: Add remarketing lists and Customer Match to accelerate learning. ... Offline conversion imports: B2B; CRM → Google Ads
Recommendation

Only use Customer Match, enhanced conversions, and offline conversion imports with authorized, minimized, policy-compliant data, and review Google’s privacy and consent requirements before uploading customer information.