Back to skill
Skillv1.0.0

VirusTotal security

Meta Ads Publisher · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 14, 2026, 6:41 PM
Hash
72be557c44c43421c1eb2583a264caf6759474a32df25140908c559fe66e6894
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: didooai-meta-ads-publisher Version: 1.0.0 The skill facilitates Meta Ads management by instructing the AI agent to use `exec + curl` to interact with the Meta Graph API. While this capability is aligned with the stated purpose, the use of shell execution for API calls (as seen in SKILL.md) introduces a risk of command injection if user-provided parameters like `AD_ACCOUNT_ID` or `CAMPAIGN_ID` are not strictly sanitized. The skill handles sensitive `META_ACCESS_TOKEN` credentials, which increases the potential impact of the inherent shell execution risk.
External report
View on VirusTotal