Meta Business CLI
v1.2.0Skill for the Meta Business CLI. Complete WhatsApp, Instagram, Facebook Pages, and Messenger automation via the Graph API. Supports messaging, media, templat...
⭐ 0· 688·2 current·2 all-time
byArtur@adolago
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (Meta Business CLI for WhatsApp/Instagram/Facebook/Messenger) aligns with the actual requirements and instructions: the skill expects a 'meta' CLI binary and documents commands for messaging, media, templates, analytics and webhooks.
Instruction Scope
SKILL.md stays within the declared purpose: it shows CLI commands, OAuth flows, and config management. It instructs storing app credentials via the CLI (meta config set) and references the local config path (~/.meta-cli/config.json), which is expected for a CLI tool. It does not instruct reading unrelated system files or exfiltrating arbitrary data.
Install Mechanism
The SKILL.md includes optional install commands: 'bun install -g meta-business-cli' and a git clone + bun build from https://github.com/adolago/meta-cli.git. Installing/building from an external GitHub repo and writing a binary to ~/.bun/bin is a normal install pattern for CLI tools but carries moderate risk if the source is untrusted — verify the upstream repo and its releases before running these commands.
Credentials
The skill declares no required environment variables and uses the CLI's own configuration and OAuth/token flows. The CLI stores app.id/app.secret and tokens in a local config file rather than requesting environment secrets from the skill registry — this is proportionate but means the local config file will contain sensitive credentials and should be protected.
Persistence & Privilege
The skill is not flagged as always:true and does not request elevated or cross-skill persistence. It suggests storing credentials in ~/.meta-cli/config.json (normal for a CLI) but does not attempt to alter other skills or system-wide settings.
Assessment
This skill appears to be a straightforward wrapper for a Meta Graph CLI. Before installing or running it: (1) verify the 'meta' CLI binary or the GitHub repo (adolago/meta-cli) is the official/trusted source you expect; avoid running arbitrary git clone/build commands from unknown repos. (2) Understand that credentials (app secret, access tokens) are stored locally at ~/.meta-cli/config.json — protect that file (restrict permissions) and prefer using short-lived tokens or system users where possible. (3) The CLI can send messages and upload local files — review and restrict any tokens you pass (use allowlist features for messaging). (4) If you want stronger assurance, inspect the upstream repository code or prefer an install path from an official release or verified package registry.Like a lobster shell, security has layers — review code before you run it.
latestvk97b0gz0t00kaq22pj00vc84gn816f9h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsmeta