paid-ads

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about creating, optimizing, and scaling paid advertising campaigns and states the agent has "direct access to ad platform accounts." It includes operational instructions to set and change budgets (e.g., "Budget set correctly", "spend vs. budget pacing", "increase budgets 20-30% at a time") and points to specific platform integrations (e.g., ../../tools/integrations/google-ads.md, meta-ads.md). Those integration references plus the "direct access" language indicate the agent is intended to interact with ad-platform APIs and can modify ad spend/budget settings — which is a specific capability to manage financial outflows (ad spend). Under the core rule, that qualifies as Direct Financial Execution (managing ad spend budgets via platform APIs), so it should be flagged.