paid-ads

Warn

Audited by Snyk on Aug 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly for managing paid ad campaigns via the Zernio Ads API and includes concrete endpoints and fields to create campaigns/boosts with budget amounts (POST /v1/ads/boost, POST /v1/ads/create) and to modify budgets (PUT /v1/ads/{id}). It requires an API key (Bearer token) and base URL, enabling the agent to submit requests that will spend money on ad platforms. Although it mandates explicit user approval ("go"), the presence of budget fields and update endpoints constitutes direct financial execution capability (managing ad spend/budgets).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 13, 2026, 06:46 AM
Issues
1
Security Audit — snyk — paid-ads