google-ads-scripts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's "Search Term Mining — Auto-Add Negatives" script in SKILL.md explicitly queries SEARCH_QUERY_PERFORMANCE_REPORT to ingest user search queries (third-party, user-generated content) and programmatically adds negatives based on that content, meaning untrusted external text is read and can directly change account behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to automate and make changes to Google Ads accounts, including programmatic bid changes, pausing keywords/ads, and budget updates (it references campaign.getBudget(), "budget updates", a Budget Pacing Monitor, automated bid adjustments, and MCC-level execution). Managing and updating ad spend/budgets via the Google Ads Scripts API is a direct means of controlling financial spend. This is not a generic browser or HTTP tool — it is a specific advertising spend automation tool, so it meets the "Direct Financial Execution" criteria.