Meta Ads Recommendation

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only Meta Ads recommendation skill that turns existing campaign analysis into advice and does not install code, access credentials, or change ad accounts automatically.

Reasonable to install for synthesizing Meta Ads recommendations from campaign analysis already in the conversation. Treat the output as advisory: confirm any budget changes, pauses, or account edits yourself in Meta Ads Manager, and review the unrelated metadata tags if your environment uses tags as permissions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The skill’s invocation description is broad enough to trigger on generic requests for campaign advice, making it likely to activate outside its intended post-analysis context. Because this skill is described as the single exit point for analysis outputs, over-broad routing could cause it to provide recommendations without sufficient validation that prerequisite analysis data exists, increasing the chance of misleading or low-confidence business guidance.

VirusTotal

66/66 vendors flagged this skill as clean.