schedule-ads

Warn

Audited by Snyk on Oct 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (medium risk: 0.30). The skill manages paid ads via the AdManage.ai API (launching ads and creating campaigns/ad sets), which involves real ad spend and constitutes a direct financial operation (purchases/charges). It authenticates requests using an ADMANAGE_API_KEY injected in-run and passed via ./secretcurl with bearer token authentication (Authorization: Bearer {ADMANAGE_API_KEY}), establishing qualifying independent service-layer authentication and access control.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 9, 2026, 03:35 PM
Issues
1