meta-ads
Warn
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: MEDIUMINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses the sensitive platform configuration file
~/.openclaw/openclaw.jsoninscripts/copy_generator.pyto retrieve Anthropic API keys for ad copy generation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources via
lp_analyzer.py(landing page scraping) andad_library.py(Meta Ad Library competitor research). This data is processed by LLM sub-agents to generate campaign strategies and creatives, creating a vulnerability surface where malicious web content could influence Meta Ads account operations. - Ingestion points:
lp_analyzer.py(landing page HTML and text extraction),ad_library.py(competitor ad bodies and headlines). - Boundary markers: The prompts in
campaign/references/stage-prompts.mdfor customer roleplay and market research sub-agents do not include explicit delimiters or instructions to ignore instructions embedded in the external data. - Capability inventory: The skill has high-privilege access to the Meta Ads API (pausing adsets, scaling budgets, and uploading ads) and the ability to execute shell commands.
- Sanitization: The skill does not perform sanitization or escaping of scraped content before interpolating it into prompts for the Opus sub-agents.
- [DYNAMIC_EXECUTION]: The skill uses dynamic execution and path manipulation for workflow management.
campaign/scripts/orchestrate.pyandcampaign/scripts/generate_creatives.pyutilizesubprocess.runto execute system commands and external scripts.campaign/scripts/generate_creatives.pycalls an external shell script (genviral.sh) located in a sibling directory (SKILL_ROOT / 'genviral').campaign/scripts/upload_to_meta.pydynamically modifies the Python search path (sys.path) to import modules from computed relative directories.- [COMMAND_EXECUTION]: The skill executes shell commands via
subprocess.runinorchestrate.pyto run various pipeline stages and ingenerate_creatives.pyto invoke thecurlutility for asset downloads. - [EXTERNAL_DOWNLOADS]: The skill performs automated downloads of external content.
campaign/scripts/lp_analyzer.pyfetches and analyzes user-provided landing page URLs.campaign/scripts/generate_creatives.pydownloads image assets from the Genviral CDN usingcurlandurllib.request.
Audit Metadata