skills/megastep/codex-skills/ads-meta/Gen Agent Trust Hub

ads-meta

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data sources, including Meta Ads Manager exports and Events Manager screenshots. This creates a potential surface for indirect prompt injection, where malicious instructions could be embedded in advertising campaign data to influence the agent's behavior. * Ingestion points: Meta Ads Manager exports, Events Manager screenshots, and EMQ (Event Match Quality) scores. * Boundary markers: The skill does not define specific delimiters or instructions to treat the ingested data as untrusted content. * Capability inventory: The skill's primary capabilities are reading local reference files, performing calculations, and writing a report (META-ADS-REPORT.md). No network or system-level execution capabilities are present in the provided instructions. * Sanitization: No sanitization or validation logic is provided for the external advertising data before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:42 AM