The Agent Skills Directory

[SAFE]: The skill is a well-structured developer utility that provides documentation, scripts, and boilerplates for official Meta WhatsApp Cloud API integration. All analyzed components follow industry-standard security patterns.
[CREDENTIALS_UNSAFE]: The skill demonstrates high security awareness regarding credentials. Diagnostic and validation scripts, such as scripts/send_test_message.py and scripts/validate_config.py, include dedicated _mask_secret functions to prevent API tokens from being accidentally logged or displayed in the terminal in cleartext.
[DATA_EXFILTRATION]: Network activity is exclusively limited to communication with the official Meta Graph API domain (graph.facebook.com). There is no evidence of data transmission to unauthorized or third-party servers.
[COMMAND_EXECUTION]: The scripts/setup_project.py script uses standard Python file system utilities (shutil, os) to scaffold local project directories from the included boilerplate assets. No unauthorized or high-risk shell commands are executed.
[REMOTE_CODE_EXECUTION]: No patterns of remote code execution, such as piping network content to a shell or using dynamic evaluation of remote strings, were found. The skill utilizes stable and well-known dependencies from official package registries.
[PROMPT_INJECTION]: The instructional content is technical and focused on API implementation. It contains no attempts to subvert agent logic, bypass safety filters, or extract system prompts.

whatsapp-cloud-api