run-paid-campaigns-apply-and-log

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill stages, proposes, and applies paid advertising campaigns and budget changes via tools like gooseworks:propose_meta_budget_change, gooseworks:prepare_meta_ad_push, and gooseworks:pause_meta_ad_push. These constitute a direct financial operation (purchasing/charging for ads and spending money on ad platforms). The skill relies entirely on conversational prompts and instructions (on the marketer's own words in this turn, applies only what the marketer approves) rather than an independent execution-layer access control or authentication mechanism for the financial actions. Therefore, it is a direct operation without established qualifying control, resulting in high severity.