meta-ads
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell scripts (
./run.shand./scripts/meta-kit.sh) to interface with themetaCLI tool. These scripts are invoked with arguments based on user requests for specific reports (e.g.,daily-check,overview,fatigue).- [DATA_EXPOSURE]: The skill reads from a localworkspace/brand/directory to store and retrieve brand-specific metadata like Account IDs and performance targets. It explicitly follows standard security practices by instructing users to keep API tokens in.envfiles rather than hardcoding them.- [PRIVILEGE_ESC_BYPASS]: Mutating actions (creating or deleting ads) are gated behind amockmode and require the agent to conduct a dry-run first and obtain explicit human approval before execution.- [SAFE]: No obfuscation, unauthorized network operations, or malicious persistence mechanisms were detected in the instruction set or provided scripts.
Audit Metadata