ClawHub
Back to skill

Security audit

Meta Ad Library API - Facebook and Instagram Ad Search

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed connector for Scavio's Meta Ad Library API and its API-key/network behavior matches that purpose.

Before installing, confirm you are comfortable using a Scavio API key and sending Meta ad search terms, page IDs, and archive IDs to Scavio. Cap crawls before running them because each paginated request consumes credits.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:47