Meta Ads Analytics

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 1:27 AM UTC
• Version: 1.0.0

Overview

This skill is a Portuguese Meta Ads analytics helper that reads ad performance data for reports and recommendations, with no executable code or hidden persistence.

Install this only if you intend to use a Portuguese-language workflow for Meta Ads analysis and are comfortable giving the configured brijr/meta-mcp access to the relevant ad account performance data. Review the MCP's own permissions because this skill depends on that external integration for data access and exports.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Natural-Language Policy Violations

Medium

• Confidence: 93% confidence
• Finding: The natural-language content in the description and usage instructions forces a specific language for interaction and comprehension. Under the policy, language constraints should either be optional for the user or clearly justified as region-specific; this file provides neither.

Natural-Language Policy Violations

Medium

• Confidence: 97% confidence
• Finding: The file’s instructional content is written entirely in Portuguese, including all prompts and guidance, with no indication that the skill is region-specific or that users may opt into another language. This can violate a language/locale policy when the skill implicitly constrains usage to a single language without user choice or justification.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The substantive guidance in this markdown file is written in Portuguese, with no accompanying language choice, translation, or explanation that the skill is intentionally region-specific. This creates a natural-language policy concern because it implicitly constrains users to a specific language without opt-in.

Natural-Language Policy Violations

Low

• Confidence: 92% confidence
• Finding: This markdown file consists entirely of Portuguese headings and instructions, which imposes a specific language on users without any visible opt-in or justification. Under the language/locale policy criterion, a skill should either offer a choice or clearly document why a locale restriction is required.

Natural-Language Policy Violations

Low

• Confidence: 95% confidence
• Finding: This markdown file presents user-facing instructional content entirely in Portuguese, but it does not indicate that the glossary is region-specific or provide any opt-in for language selection. Under the language/locale policy rule, forcing a specific language without user choice can be a natural-language policy violation.

Natural-Language Policy Violations

Low

• Confidence: 96% confidence
• Finding: The file's headings and bullet items are entirely in Portuguese, which imposes a specific language on users of the template. The policy allows language constraints when users are given a choice or when the locale limitation is explicitly documented and justified, neither of which appears in this file.

Static analysis

No suspicious patterns detected.