SocQ Google Ad Library Research

• Outcome: Pass
• Latest audit: Oct 16, 2026 · 2:15 AM UTC
• Version: 1.0.4

Overview

This skill is a coherent SocQ integration for public Google Ad Library research, with disclosed network/API-key use and cost controls.

Before installing, make sure you trust SocQ with the public ad research queries and your SocQ API key. Prefer a pinned or preinstalled @socq/cli version instead of ad hoc npx execution when possible, and review expected credit costs before allowing large or multi-endpoint runs.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 96% confidence

Finding

The skill allows execution via npx without a pinned package version, which can fetch whatever package version is current at runtime. This creates a supply-chain risk: a malicious or compromised upstream release of @socq/cli could be executed by the agent without prior review or reproducibility guarantees.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 98% confidence

Finding

npx @socq/cli executes a remote package without specifying an exact version, so the actual code run may change over time. In an agent skill context, this is risky because the agent may automatically run the command, turning an upstream package compromise into arbitrary code execution in the agent environment.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 61)May include surrounding context.

md

value: "socq"
      description: "Hosted SocQ Google Ad Library data tools"
      transport: "streamable_http"
      url: "https://api.socq.ai/mcp?platforms=google-ad-library"

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · agents/openai.yaml (reported line 11)May include surrounding context.

yaml

value: "socq"
      description: "Hosted SocQ Google Ad Library data tools"
      transport: "streamable_http"
      url: "https://api.socq.ai/mcp?platforms=google-ad-library"