Meta Ads Manager — No API Key Required
v1.0.0Manage and analyze Meta (Facebook/Instagram) Ads campaigns. Use this skill when the user asks about ad performance, campaign metrics, ad spend, ROAS, CPA, CT...
⭐ 7· 2.1k·8 current·8 all-time
byAidan Dunlap@aiddun
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (manage Meta Ads) matches the instructions: listing accounts, reading insights, and performing campaign mutations via read_ads/write_ads. No unrelated credentials or binaries are requested, which is consistent with the claim that authentication is handled by an external MCP server.
Instruction Scope
SKILL.md limits actions to Meta Graph API endpoints via sandboxed tools (metaFetch/metaPost/metaDelete) and explicitly requires user confirmation before any write operations. It does not instruct reading local files, arbitrary env vars, or contacting unrelated external endpoints.
Install Mechanism
Instruction-only skill with no install spec or code files—this is the lowest-risk install model and matches the declared metadata.
Credentials
No environment variables or credentials are requested in the manifest, which aligns with the statement that the MCP server supplies OAuth access. However, the skill implicitly requires the runtime to provide the MCP tools and authenticated access; this dependency should be verified. The ability to perform writes to ad accounts is powerful but the skill requires explicit user confirmation before write operations.
Persistence & Privilege
always is false and there is no install-time persistence requested, which is appropriate. Be aware that the skill uses 'persist' in tool calls to carry state between calls; this is normal for workflows but means the runtime will retain some intermediate ad-account data between calls. Also note that autonomous agent invocation is allowed by default—combined with write capability this increases blast radius if approvals are automated or misunderstood.
Assessment
This skill appears coherent for Meta Ads management: it expects the platform runtime to provide authenticated MCP tools and does not ask for local secrets. Before installing or invoking it, confirm who operates the 'Metacog MCP' service and whether your platform/runtime actually provides the listed tools (list_ad_accounts, read_ads, write_ads). Verify audit logging and that writes require explicit human approval (don't approve changes you don't fully review). Because the skill's source and homepage are unknown, prefer installing only in environments where you can audit tool calls or where least-privilege controls and logs are in place. If you need higher assurance, ask the publisher/runtime owner for documentation or an origin URL for the MCP service and for examples of the exact API calls that will be made during reads/writes.Like a lobster shell, security has layers — review code before you run it.
latestvk97b9tz1wa0cen5pea63h7y09d81qskn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.