catalog-commerce

SUSPICIOUS: the business purpose is coherent, and the requested reads/writes fit catalog setup, but the skill delegates sensitive ad-account access to an unspecified 'Meta Ads MCP with write access.' Because official and third-party MCPs both exist, and some third-party options proxy credentials through non-Meta services, the main risk is credential/data routing and unclear execution trust rather than confirmed malicious behavior.