Search Query Analyst

Warn

Audited by Snyk on Jul 23, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly calls out integration with Google Ads/MCP APIs and states the agent should "Pull live search term reports" and "Push negative keyword changes back to the account ... deploy negatives at campaign or shared list level." That is a specific API capability to make write changes in an ad account (modify campaign/ad-group settings that affect spending). Because the skill is specifically designed for paid-media operations and includes an explicit API/action to modify account configuration, it grants direct execution authority over advertising spend actions.

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 23, 2026, 02:36 PM
Issues
1
Security Audit — snyk — Search Query Analyst