kelly-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow ingests platform ad reports (including campaign names, search terms, and creatives) which may originate from external advertising platforms or user uploads.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an ad-campaign command desk that manages and proposes adjustments for advertising spend across Amazon, Meta, TikTok, and Google Ads. It deals with advertising spend configuration, budget pacing, and bid/budget adjustments. However, it does not perform direct financial transfers, charges, refunds, or purchases itself; the actual platform mutations and financial operations are explicitly delegated to external human approval and execution outside the app (with scripts acting only as planners or data ingestion tools, and real mutations performed externally by the user/agent). Thus, its financial operations are indirect (managing campaign budgets, spend targets, and ad performance data for downstream execution).