ads
Warn
Audited by Snyk on Oct 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (medium risk: 0.30). The skill manages Spotify Ads via API (
ad-setsandads), which involves setting budgets, bids, and financial values (micro-amounts). However, the default behavior for creation and updates is to stage changes through drafts ("drafts by default", "Use direct live writes only when explicitly requested"). Even when explicit direct writes or execution occurs, no direct payment execution (such as transfers, charges, or settlement authorization) is performed by the agent itself; the skill operates ad campaign management APIs. Therefore, this constitutes an indirect financial operation (creating/modifying billable ad entities).
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata