ad-copy-generator

SUSPICIOUS. The skill’s purpose, file access, and Meta data usage are broadly aligned, and the shell examples are documentation rather than true command injection. The main risk is install/execution trust: it relies on an ambiguous local `meta` CLI without telling the user how to verify it is Meta’s official tool, creating medium supply-chain and possible credential-forwarding risk if a third-party binary is present.