audience-builder

The skill’s stated capability is mostly coherent with its advertising purpose, and its guardrails reduce autonomy risk. The main concern is trust ambiguity: it relies on an unspecified Meta Ads MCP that may be an unofficial third-party service receiving Meta tokens and possibly customer-list data, so this is better classified as suspicious/medium risk rather than benign.