awesome-growth-hacking-skills-directory

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The README explicitly instructs cloning remote skill code with "git clone https://github.com/Bhanunamikaze/Agentic-SEO-Skill.git", which fetches code that will be installed and executed by the agent at runtime and thus can directly control prompts/behavior.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The SKILL.md explicitly references advertising skills that integrate with Google Ads and Meta Ads, includes environment variables for GOOGLE_ADS_API_KEY / META_ACCESS_TOKEN, and shows an example command to "create-campaign" against google-ads. These are specific integrations with ad platforms (APIs that can create ad campaigns and control paid media), which constitute direct financial execution capability for managing ad spend.