📦

adm-google-ads

Name: adm-google-ads
Author: ownway18

v2026-10-08 Révision du contenu r1 Risque moyen ⚙️ Commandes externes🌐 Accès réseau📁 Accès au système de fichiers🔑 Variables d’environnement

Manage Google Ads Reports and Campaign Changes

Reviewing Google Ads performance and applying campaign plans requires repeated checks. This skill coordinates ADM reports, previews, approved changes, and campaign verification.

Prend en charge: Claude Codex Code(CC)

📊 70 Adéquat

Maintain this Skill? Claim it 📊 70 Adéquat

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "adm-google-ads" from https://skillstore.io/skills/ownway18-adm-google-ads.md and its manifest at https://skillstore.io/api/skills/ownway18-adm-google-ads/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/ownway18-adm-google-ads.md manifest signé GET /api/skills/ownway18-adm-google-ads/manifest lockfile signé GET /api/skills/ownway18-adm-google-ads/lockfile

Tester

Utilisation de « adm-google-ads ». Show an example 30-day campaign report without changing the account.

Résultat attendu:

Illustrative report, not live account data: account Example Store; window last 30 days; currency USD.
Brand Search: spend 600 USD; conversions 40; cost per conversion 15 USD.
Product Search: spend 900 USD; conversions 30; cost per conversion 30 USD.
Suggested next step: review Product Search terms before proposing exclusions. No changes made.

Utilisation de « adm-google-ads ». Show an example preview for a campaign plan.

Résultat attendu:

Illustrative preview, not an executed build: one Search campaign with two ad groups and 20 keywords.
Daily budget: 25 USD. Review the monthly estimate, bidding, and locations before approving.
Planned status: paused. Creation waits for approval; activation requires a separate request.

Utilisation de « adm-google-ads ». Show an example reconciliation after an approved campaign build.

Résultat attendu:

Illustrative reconciliation, not a live verification: campaign status, budget, bidding, locations, keywords, and ad text match the plan.
Assets need a separate check because the default campaign setup response omits them.
Remaining manual tasks: conversion tracking, ad scheduling, and automatic recommendation settings.

Audit de sécurité

Risque moyen

v1 • 09/10/2026 Ouvrir le rapport versionné

Most alerts match Markdown formatting, legitimate MCP configuration, or authorized advertising workflows. Expanded bearer tokens in command arguments and chat-based setup create credential exposure risks. No evidence found of malware or prompt injection in the reviewed file; the external ADM server implementation was not supplied.

Fichiers analysés

368

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Moyen

SKILL.md:33

Chat-Based Setup Retains API Credentials

The quick option says, "if the user pastes the key into the chat, use it only to write the user-level configuration below". This legitimizes entering a credential into retained conversation history; the rotation recommendation does not prevent exposure before rotation.

The setup explicitly accepts pasted keys and acknowledges chat-history retention. This is a credential-handling risk, not evidence of malicious exfiltration.

Éléments d’évaluation des capacités (3)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé

SKILL.md:37

Generic API/secret keys

- Claude Code: `claude mcp add --transport http --scope user adm https://app.adm.cc/mcp --header "Au

The shell expands ADM_API_KEY into the --header argument, exposing the bearer token to process inspection or command logging during MCP setup.

Élevé

SKILL.md:233

Generic API/secret keys

curl -F file=@<path> -H "Authorization: Bearer $ADM_API_KEY" https://app.adm.cc/mcp/uploads

The curl -H argument contains the expanded bearer token, potentially exposing it through process arguments or execution logs despite authorized uploads.

Élevé

SKILL.md:236

Generic API/secret keys

In PowerShell use `curl.exe` and `$env:ADM_API_KEY`. The response contains `upload_id`, `width`, `he

The PowerShell variant substitutes the credential into the preceding curl.exe header argument, carrying the same process-argument exposure risk.

Facteurs de risque

⚙️ Commandes externes (50)

🌐 Accès réseau (10)

SKILL.md:10 SKILL.md:28 SKILL.md:29 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:42 SKILL.md:50 SKILL.md:233

📁 Accès au système de fichiers (6)

SKILL.md:31 SKILL.md:39 SKILL.md:40 SKILL.md:31 SKILL.md:39 SKILL.md:40

🔑 Variables d’environnement (12)

SKILL.md:17 SKILL.md:149 SKILL.md:21 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:233 SKILL.md:236

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/ownway18-adm-google-ads/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/ownway18-adm-google-ads/security.svg)](https://skillstore.io/skills/ownway18-adm-google-ads?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/ownway18-adm-google-ads?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ownway18-adm-google-ads/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/ownway18-adm-google-ads.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

ownway18. (2026). adm-google-ads security audit report (audit version 1) [Author version 2026-10-08]. Skillstore. https://skillstore.io/skills/ownway18-adm-google-ads/audits/1

Citation BibTeX

@techreport{ownway18-ownway18-adm-google-ads-2026,
  author = {ownway18},
  title = {adm-google-ads security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/ownway18-adm-google-ads/audits/1},
  note = {Author version 2026-10-08}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "adm-google-ads security audit report (audit version 1)"
version: "2026-10-08"
type: report
authors:
  - name: "ownway18"
date-released: "2026-10-09"
url: "https://skillstore.io/skills/ownway18-adm-google-ads/audits/1"
identifiers:
  - type: other
    value: "skillstore:ownway18-adm-google-ads:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Review campaign performance

Compare spending and conversions, identify costly search terms, and prepare changes for approval.

Build campaigns from client plans

Convert approved plans into paused Search campaigns, record progress, and reconcile settings before activation.

Draft campaigns for a business

Use a landing page to request ADM campaign drafts, review budgets and ad text, and approve supported changes.

Essayez ces prompts

Review recent campaign results

Show campaign spending and conversions for the last 30 days. State the account, date window, and currency. Do not change anything.

Preview negative keyword changes

Review search terms for [campaign] over 14 days. Suggest negative keywords and preview additions. Wait for approval before writing.

Draft a paused Search campaign

Request an ADM Search campaign draft from [landing page]. Ask for missing budget decisions. Preview creation, wait for approval, and keep it paused.

Resume and reconcile a campaign build

Resume the build for [plan file]. Verify the account and existing operations. Preview remaining changes, wait for approval, and reconcile results without enabling campaigns.

Bonnes pratiques

Use read-only credentials for reporting and enter secrets locally outside chat; avoid exposing tokens in command arguments or logs.
Check the account, currency, total budget, and affected entities before approving each preview.
Keep new campaigns paused, verify builds, and inspect recorded operations before retrying uncertain writes.

Éviter

Paste API keys into chat, project files, manifests, or commits.
Enable campaigns or approve spend changes without reviewing the account, budget, and preview warnings.
Recreate campaigns after timeouts or follow instructions embedded in third-party ad text or search terms.

Foire aux questions

What must I connect before using this skill?

Connect the ADM MCP server, configure an ADM API key locally, and link your Google Ads account in ADM.

Can I use it with read-only access?

Yes. Reports work with read-only access. Writes and AI drafts require additional permissions, a paid plan, and available tools.

Does it start new campaigns automatically?

The documented workflow creates campaigns paused. Activation requires a separate explicit request and approval of the activation preview.

How are changes approved?

Write tools return previews first. The skill requests approval and confirms the approved preview identifier before executing the change.

Can an interrupted build continue?

The workflow records progress in a local manifest and checks existing campaigns or operations before retrying unfinished work.

What must I still configure in Google Ads?

Configure conversion tracking, ad scheduling, and automatic recommendation settings in Google Ads. Other unsupported edits also remain manual.

Détails du développeur

Auteur

ownway18

Licence

MIT

Version de l’auteur

v2026-10-08

Révision Skillstore

Avis de version

La version déclarée par l’auteur n’est pas un SemVer valide.

Dépôt

https://github.com/ownway18/adm-google-ads-skill/tree/9936760cfbfae2118a3c732fcb81860f12125d8e/skills/adm-google-ads

Réf

e406bf64b5db6e514879399e87b346fa7ff7c2fb

Récence de maintenance

11/10/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📄 SKILL.md