google-ads

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for managing Google Ads accounts and includes concrete execution actions (both browser and API) that change campaign state and thus directly affect ad spend. It documents a browser workflow to "Pause Keywords/Campaigns" and provides API code that builds AdGroupCriterionOperation objects and calls mutate_ad_group_criteria to set status=PAUSED. It also includes recommended actions like "INCREASE: Branded budget." These are specific, actionable account-management operations (not generic browsing or generic HTTP) that can stop or change spending, so this qualifies as direct financial execution authority for ad spend.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 01:06 PM
Issues
1
Security Audit — snyk — google-ads