keyword-research

Warn

Audited by Snyk on Apr 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill explicitly integrates with users' Google Ads accounts and describes automatically applying approved keywords, match types, and bids into campaigns ("Approved keywords flow into the appropriate campaigns with match types and bids pre-configured..."; "Negative keywords are automatically categorized and applied at the correct level"; "When a user connects their account, Buddy™ immediately analyzes..."). Those are specific advertising-account operations that modify campaign settings and bidding (i.e., directly affect ad spend). This is not a generic browser or HTTP tool — it is purpose-built for Google Ads account management and executes changes that change financial outlay. Therefore it contains direct financial execution capability (ad spend/bid updates).

Issues (1)

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 12, 2026, 07:03 PM
Issues
1