reddit-ads

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill calls Anthropic at runtime via the Anthropic SDK (e.g., https://api.anthropic.com) to generate JSON recommendations that are parsed and directly drive ad-management actions (pause/scale/adjust bids), so external model outputs control agent behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly designed to manage and execute advertising spend via the Reddit Ads API. It includes endpoints and client methods to create/update campaigns and ad groups with budget fields (budget_total_amount_micros), update ad groups to change bid_amount_micros, create campaigns with budgets, and the optimizer code programmatically scales budgets and pauses ads (executeOptimizations calls client.updateAdGroup and client.updateAd). It also surfaces a funding endpoint (/accounts/{account_id}/funding) and requires OAuth tokens. Because it can programmatically change budgets and bids (i.e., directly modify ad spend), it grants direct financial execution authority over ad spend.