reddit-ads

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup uses "npx @useclawlink/cli" which at runtime fetches and executes remote code from the npm package (https://www.npmjs.com/package/@useclawlink/cli) and is required for the skill to operate, so it executes external code during runtime.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill connects the agent to Reddit Ads via ClawLink and exposes explicit write actions for ad management (e.g., reddit_ads_create_campaign, reddit_ads_create_ad_group, reddit_ads_create_post, reddit_ads_create_product_catalog). Those actions are specific to advertising management and inherently include the ability to create/modify campaigns and ad groups — operations that set and control ad spend/budgets and thus cause financial transactions (spending on ads). This is not a generic tool: it is explicitly designed to manage an ad account and perform write operations that control spend.