pp-amazon-ads

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs installation of external tools via npx (@mvanhorn/printing-press-library) and go install (github.com/mvanhorn/printing-press-library/...), but mvanhorn is an individual-owned repository and unofficial third-party source, creating a weak operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill document SKILL.md describes an interface (amazon-ads-pp-cli) for managing Amazon Ads campaigns, budgets, bids, and advertising reports. Although it deals with advertising budgets and ad spend metrics, the core rule specifies that managing ad spend budgets (specifically the API to update the budget) counts as Direct Financial Execution. The tool references commands such as sponsored-brands-sb create-budget-rules-for-sbcampaigns, sponsored-display-sd create-budget-rules-for-sdcampaigns, sponsored-products-sp create-budget-rules-for-spcampaigns, and budget adjustments which directly alter financial expenditure on advertising platforms. Therefore, it triggers Risk 1 under the rule for managing ad spend budgets.