Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed Facebook Page automation guide with real account-management risk, but no hidden code, exfiltration, or deceptive behavior was found.
Use this only for Facebook Pages you own or are authorized to manage. Review any cron jobs before enabling them, use a dedicated browser profile, keep workspace memory files and webhook alerts private, and require manual review before actions such as deleting comments, banning users, or expanding beyond Phase A.
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
5. **Start in Phase A** until page_age ≥ 30 days AND followers ≥ 100 AND no warning in 30 days. Don't shortcut.
Referenced artifact was not completely inspected
| Cursor / Copilot CLI | drop `SKILL.md` into your project's `.cursorrules` or `AGENTS.md` |
Referenced artifact was not completely inspected
| Cursor / Copilot CLI | drop `SKILL.md` into your project's `.cursorrules` or `AGENTS.md` |
Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
## 15. Phase A → Phase B transition
When the Daily Metrics Recap detects (page_age_days ≥ 30) AND (followers ≥ 100) AND (page_quality = green) AND (no warning in 30 d):
1. Append to `fb-state.md`: `YYYY-MM-DD - phase=A - PHASE_B_THRESHOLD_REACHED`.
2. Send a distinct alert: `🎉 FB Page ready for Phase B — flip outbound crons manually after review`.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
mkdir -p ~/.claude/skills/facebook-account-operations
cp SKILL.md ~/.claude/skills/facebook-account-operations/
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
mkdir -p ~/.claude/skills/facebook-account-operations
cp SKILL.md ~/.claude/skills/facebook-account-operations/
The skill description is intentionally broad enough to activate on many generic Facebook-related tasks, including scheduled automation. In this context, that increases the chance an agent will apply high-risk account-automation behavior outside narrowly intended Page-management scenarios, which can cause unsafe actions or policy-violating automation on Facebook surfaces.
The configuration example sets timezone: Europe/Paris, which imposes a locale-specific default in natural language guidance/configuration. The file does not frame this as an example to be replaced based on user preference or operational locale, so it can violate language/locale policy expectations.
No suspicious patterns detected.