shared-budget-updater

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Google Sheets uploader tab ingestion occurs at runtime via the Sheets API read/parse of columns A:D where D is empty (the approved queue), so an outsider who can edit the sheet can submit arbitrary free text that the workflow ingests and formats into alerts and mutations.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to change live ad spend budgets: it reads approved rows from a sheet and issues Google Ads REST mutations (campaignBudgets:mutate with updateMask: amount_micros) on a scheduled cron. This is a specific ad-spend budget management API (directly updates budgets), which meets the "Managing Ad Spend Budgets" criterion for Direct Financial Execution.