meta-ads

Warn

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: MEDIUMINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill accesses the sensitive platform configuration file ~/.openclaw/openclaw.json in scripts/copy_generator.py to retrieve Anthropic API keys for ad copy generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources via lp_analyzer.py (landing page scraping) and ad_library.py (Meta Ad Library competitor research). This data is processed by LLM sub-agents to generate campaign strategies and creatives, creating a vulnerability surface where malicious web content could influence Meta Ads account operations.
  • Ingestion points: lp_analyzer.py (landing page HTML and text extraction), ad_library.py (competitor ad bodies and headlines).
  • Boundary markers: The prompts in campaign/references/stage-prompts.md for customer roleplay and market research sub-agents do not include explicit delimiters or instructions to ignore instructions embedded in the external data.
  • Capability inventory: The skill has high-privilege access to the Meta Ads API (pausing adsets, scaling budgets, and uploading ads) and the ability to execute shell commands.
  • Sanitization: The skill does not perform sanitization or escaping of scraped content before interpolating it into prompts for the Opus sub-agents.
  • [DYNAMIC_EXECUTION]: The skill uses dynamic execution and path manipulation for workflow management.
  • campaign/scripts/orchestrate.py and campaign/scripts/generate_creatives.py utilize subprocess.run to execute system commands and external scripts.
  • campaign/scripts/generate_creatives.py calls an external shell script (genviral.sh) located in a sibling directory (SKILL_ROOT / 'genviral').
  • campaign/scripts/upload_to_meta.py dynamically modifies the Python search path (sys.path) to import modules from computed relative directories.
  • [COMMAND_EXECUTION]: The skill executes shell commands via subprocess.run in orchestrate.py to run various pipeline stages and in generate_creatives.py to invoke the curl utility for asset downloads.
  • [EXTERNAL_DOWNLOADS]: The skill performs automated downloads of external content.
  • campaign/scripts/lp_analyzer.py fetches and analyzes user-provided landing page URLs.
  • campaign/scripts/generate_creatives.py downloads image assets from the Genviral CDN using curl and urllib.request.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 20, 2026, 06:02 PM