meta-onboarding
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs 'requests' and 'python-dotenv' via pip during the connectivity test phase. These are well-known, standard libraries for HTTP requests and environment variable management.
- [COMMAND_EXECUTION]: The skill executes shell commands to copy environment templates (
cp .env.example .env) and run a local python script (python get_active_ads_copy.py) to verify the Meta API connection. These actions are transparent and necessary for the stated purpose of onboarding. - [CREDENTIALS_UNSAFE]: While the skill handles sensitive data like Meta Access Tokens and App Secrets, it instructs the user to store them in a local
.envfile, which is a standard and recommended practice for local development environments. No hardcoded secrets were found.
Audit Metadata