clone

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates on the Spotify Ads API to clone campaigns and ad sets. Its documented workflow explicitly creates drafts ("Nothing is published automatically", SKILL.md:10; "Do not publish as part of cloning", SKILL.md:243; "Never publish a clone automatically", SKILL.md:338). Because creating drafts does not move, charge, request money, or execute financial transactions, the financial operation is indirect. Indirect operations map to the medium severity tier.