launch-meta-ads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text via the user-provided “Drive folder URL / Airtable batch” creatives list and “Offer + landing page URL” (Step 1–2), and then LLMs over the resulting file-derived copy/images metadata to generate ad “Primary Text/Headline/Description” before calling ads_create_standalone_ad.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provisions and controls ad spend via the Zernio ad API. It calls a specific tool (ads_create_standalone_ad) to create campaigns/ad-sets/ads, sets budget_amount (dollars), and can update/rebudget campaigns (ad_campaigns_update_ad_campaign) and flip ads active. This is a dedicated ad-spend execution integration (not a generic browser/API caller), so it grants direct financial execution authority over ad budgets.