apple-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow consumes outsider-submitted search terms via adapty asa search-terms list.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill operates an Apple Ads account via the Adapty CLI, supporting direct financial operations such as creating campaigns with daily budgets, setting default bids, adding keywords, and updating statuses that spend real money (SKILL.md:9-10, 303-308, 324-328). No independent access control is enforced by the service or execution layer for these direct payment routes; authentication relies on local CLI session credentials (adapty auth login), with user confirmation managed entirely through agent prompts and the optional --yes flag rather than an independent execution-layer authorization check.