ad-creative

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list includes a personal site and a GitHub repository that host or point to downloadable desktop apps/build-from-source instructions (voicebox.sh and jamiepine/voicebox), which are third‑party executable sources that carry higher malware risk unless verified.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly references platform integrations and specific campaign-management commands (e.g., google-ads campaigns create) that allow creating/managing ad campaigns. Creating or managing ad campaigns typically includes configuring/updating budgets and thus can directly affect spend. This is a specific integration for managing ad spend (not merely a generic "make HTTP request" or browser automation), so it qualifies as direct financial execution authority per the guideline about managing ad spend budgets.