money-ads

SUSPICIOUS: the core paid-ads purpose broadly matches the capability set, but the skill delegates to unspecified third-party/internal skills, implies high-impact autonomous ad spend actions, and references telemetry/provisioning flows that are not reviewable here. No direct malware, exfiltration endpoint, or installer abuse is present in this artifact, but the transitive trust chain and real-world action scope make it medium risk.