Facebook/Meta Ads

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

Overall, the skill's footprint is moderately coherent with its stated purpose of automating Meta Ads campaigns. It aligns with campaign management, audience targeting, and performance reporting capabilities. However, there are notable gaps in explicit credential management, data governance for customer data, and explicit security controls for handling tokens and secrets. No evident download/execute or external data exfiltration patterns are present. Given the presence of potentially sensitive audience data and API interactions, the skill should clearly document secret handling, access scopes, and consent considerations to be considered benign. Until credential management is specified, classify as SUSPICIOUS-BECAUSE-OF-UNSPECIFIED-CREDENTIALS with a cautious stance; otherwise, it sits in the Benign to Low-Medium risk range pending further detail.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Ffacebookmeta-ads%2F@4f5cd99dd171601ff3d8a758325cf189d4d1afb1
Security Audit — socket — Facebook/Meta Ads