Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed governance policy for Meta Ads operations and mainly adds approval gates, audit steps, and limits around brijr/meta-mcp tool use.
Install this only if you want an agent to help govern Meta Ads work through brijr/meta-mcp. Review the no-approval budget and pause/resume rules before use, because they can affect live ad delivery and spend even though the skill places clear limits and requires approval for higher-risk changes.
The file’s natural-language content, including the description, usage criteria, workflow, and required response structure, is entirely in Portuguese. Under the policy, forcing a specific language without user opt-in or a clearly justified regional constraint is a natural-language policy violation.
The file switches from English to Portuguese in the 'forbidden' and 'Budget limits' sections, which imposes a specific language for critical policy content without user opt-in. Because these lines define operational constraints and approvals, the language shift can create policy ambiguity for users who expect the skill documentation to remain in the same language.
The policy content is written in Portuguese and does not offer any language choice or explain that the skill is region- or locale-specific. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation.
The file’s natural-language instructions are entirely in Portuguese, which can impose a specific language on users or operators without opt-in. Under the stated policy, language constraints should either offer user choice or be clearly justified as region-specific.
The document is written entirely in Portuguese and includes no indication that language selection is optional or user-configurable. Under the policy, forcing a specific language without opt-in is a natural-language policy concern unless the locale restriction is explicitly documented and justified.
Line L45 states that Platform must be Meta, imposing a fixed naming value in natural-language guidance. This is a policy-style constraint presented without user opt-in or justification that the skill is intended only for Meta-specific workflows.
The checklist is written entirely in Portuguese, which imposes a locale/language choice in the skill material without offering an alternative or documenting why that language requirement is necessary. The policy for this audit flags language or locale constraints when they are not optional or clearly justified.
No suspicious patterns detected.
