campaign-ide-handoff

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 0.70). The skill manages advertising campaigns and includes execution tools (execute_campaign_plan) that activate plans involving ad spend. This constitutes a direct financial operation (charges/purchases/advertising spend). While instructions state to require human approval ("approve ≠ activate"), there is no qualifying independent service-side authentication or access control enforced by the skill documentation itself for the execution route—it relies on agent adherence to instructions and downstream OAuth setup. Therefore, it falls under High severity.