Meta Ads Publisher

• Outcome: Review
• Latest audit: May 29, 2026 at 9:33 PM UTC
• Version:
  1.0.0

Overview

This skill openly manages Meta Ads, but it can make spend-affecting account changes through broad instructions, so users should review and tightly control it before installation.

Install only if you intend to let the agent operate a Meta Ads account. Use a least-privileged token for the intended ad account, keep new campaigns paused until human review, and require explicit confirmation of the ad account, object IDs, budget, status, and exact change before any create, duplicate, budget, pause, or activate action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The skill description is broad enough to trigger on generic campaign-management requests without clearly constraining scope, confirmation requirements, or allowed operations. Because this skill performs real-world state-changing advertising actions, overbroad routing increases the chance of unintended campaign creation, edits, budget changes, or activation.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The when-to-use guidance lacks clear activation constraints and exclusions, so the agent may invoke this skill for loosely related requests. In a high-impact ad-management context, ambiguous triggering can cause unauthorized or mistaken ad operations against a live ad account.

VirusTotal

47/47 vendors flagged this skill as clean.