meta-ads-audit

SUSPICIOUS: the skill’s capabilities mostly match its stated Meta audit purpose, but its data flow depends on a third-party hosted MCP and related docs introduce transitive plugin trust outside the publisher’s domain. The core behavior looks coherent and not overtly malicious, yet the intermediary routing, website crawling, and reusable data persistence create medium security risk that is higher than a purely direct-to-Meta read-only audit.