Security audit
Security checks for vulnerabilities and agentic risk
This skill only guides read-only Meta Ads performance diagnosis, with a minor documentation mismatch about whether it should also draft recovery advice.
Before installing, confirm you are comfortable providing a Meta token with ads_read access and account performance data to the agent. Treat any recovery plan as advice to review manually in Ads Manager, since the skill's own wording is inconsistent about whether recommendations belong here or in a separate recommendation skill.
The manifest and rules frame the skill as performing diagnosis of Meta Ads performance drops, and L105 explicitly states "This is diagnosis only — specific action recommendations route to meta-ads-recommendation." However, Step 3 instructs the skill to produce an actionable recovery plan including immediate, short-term, and prevention actions, which contradicts that stated limitation.
L112-L118 says this skill stores a "recovery_plan" containing immediate, short-term, and prevention actions, while L119 says another skill reads these keys to produce the structured recovery action plan. Combined with L105's statement that specific action recommendations should route elsewhere, this documentation conflicts about whether this skill itself generates recommendations or merely hands off diagnostic context.
