meta-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow scrapes arbitrary landing page URLs provided via command line arguments using lp_analyzer.py, ingesting external web content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes capabilities to manage and shift advertising budgets via the Meta Ads Manager and Meta Graph API ("shift budget to winners", managing ad spend/budgets through scripts like auto_optimize.py and Meta Ads integration). According to the rules, managing ad spend budgets via API triggers a risk score of 1.