The write access is the interesting part here. How are you handling approval boundaries for campaign changes—does the agent propose changes first, or can it execute within predefined limits?
Calling it malware seems like a stretch. It reads more like a defense against automated scrapers.. the systems affected are the ones pulling data without asking.