Facebook/Meta Ads
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileOverall, the skill's footprint is moderately coherent with its stated purpose of automating Meta Ads campaigns. It aligns with campaign management, audience targeting, and performance reporting capabilities. However, there are notable gaps in explicit credential management, data governance for customer data, and explicit security controls for handling tokens and secrets. No evident download/execute or external data exfiltration patterns are present. Given the presence of potentially sensitive audience data and API interactions, the skill should clearly document secret handling, access scopes, and consent considerations to be considered benign. Until credential management is specified, classify as SUSPICIOUS-BECAUSE-OF-UNSPECIFIED-CREDENTIALS with a cautious stance; otherwise, it sits in the Benign to Low-Medium risk range pending further detail.