meta-ads-audit

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly describes using Meta's native Ads MCP and, while "read-only by default", it also documents an explicit, separate "Taking action" step that uses the Meta MCP's write tools to perform account changes. The doc gives concrete examples of write operations that change spend: "pause those 4 zero-purchase ads" and "raise Problem-Solution v3 to $200/day" and instructs to "make one change at a time via the Meta MCP's write tools." Updating ad budgets / pausing ads via the MCP is a direct ad-spend management API (i.e., direct financial execution) per the policy.