ucoz-ad-campaign-landing-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow ingests outsider-authored free text when fetching ads via Yandex Direct and Google Ads APIs, where external advertisers or accounts can submit arbitrary ad text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages ad campaigns and package strategies in Yandex Direct, which involves setting budgets and package strategies. However, the workflow explicitly prohibits launching campaigns, sending them to moderation, or topping up the account without an explicit command (Rule 6, Prohibitions). While campaign budgeting and preparation are handled, direct financial operations such as making payments, processing charges, or executing fund transfers are not performed or initiated by the skill itself, placing it in the indirect financial operation category (managing campaign structures and budget packages).