Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Facebook Reels research workflow that uses Gecho's MCP and Chrome extension, with ordinary caution needed around logged-in browser access and optional saved results.
Install this only if you are comfortable using Gecho's Chrome extension and MCP bridge with a logged-in Facebook browser session. Treat saved result files as retained social-media data: choose any save directory deliberately, avoid storing data you do not need, and remove files when finished.
The skill supports writing collected results to a local absolute directory but does not prominently foreground that it may create persistent local files containing scraped social-media data. This creates a real privacy and user-consent risk because users may not realize data will be stored on disk, retained after the session, or written to an unexpected location.
The activation rule is broad enough to trigger on general 'research', 'structured collection', or 'platform investigation' requests, which can cause the agent to invoke this skill in contexts the user did not specifically intend. In this skill, that over-broad routing is somewhat constrained by the single-tool workflow and explicit Facebook Reels scope, so the main risk is misrouting and unnecessary data collection rather than arbitrary code execution or privilege escalation.
No suspicious patterns detected.
