lanbow-ads-skills
Manages the complete Meta Ads lifecycle, from strategy to optimization, ensuring effective campaign execution and performance enhancement.
Install this skill
or
27/100
Security score
The lanbow-ads-skills skill was audited on May 15, 2026 and we found 15 security issues across 3 threat categories, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 222
Access to hidden dotfiles in home directory
SourceSKILL.md
| 222 | | `META_ACCESS_TOKEN` | **High** — grants ad account access | Feature 3 (Ad Delivery) | `lanbow-ads` CLI config dir (`~/.config/lanbow-ads/`) | |
medium line 264
Access to hidden dotfiles in home directory
SourceSKILL.md
| 264 | - **Credential handling:** Credentials are configured via the `lanbow-ads` CLI and stored in its config directory (`~/.config/lanbow-ads/`). This skill itself does not persist or transmit credentials |
medium line 143
Access to .env file
SourceSKILL.md
| 143 | **Requires:** Meta Access Token, App ID, Ad Account ID (declared in `requires.env`). App Secret is optional — only needed for exchanging short-lived tokens to long-lived tokens via `lanbow-ads auth ex |
medium line 218
Access to .env file
SourceSKILL.md
| 218 | **Required** (declared in `metadata.openclaw.requires.env` — needed for ad delivery): |
high line 156
Prompting for password/secret input
SourceSKILL.md
| 156 | 2. **Ask the user to provide credentials directly (most common):** If env vars are not set, tell the user exactly how to get each credential from Meta's web interface. **Recommend the user use their p |
high line 237
Prompting for password/secret input
SourceSKILL.md
| 237 | **Prefer environment variables or your platform's secret/credential fields over pasting credentials into chat.** If the user must provide credentials in conversation, only request the minimum set need |
high line 283
Prompting for password/secret input
SourceSKILL.md
| 283 | 1. **Use env vars or secret fields, not chat** — provide credentials via environment variables or your platform's secret/credential input fields. Avoid pasting App Secret or long-lived tokens directly |
low line 14
External URL reference
SourceSKILL.md
| 14 | homepage: https://lanbow.com/ |
low line 31
External URL reference
SourceSKILL.md
| 31 | End-to-end Meta Ads lifecycle management across 4 features: **Strategy → Creative → Delivery → Review**, forming a continuous optimization loop. Built by [Lanbow](https://lanbow.com/) — see the [detai |
low line 157
External URL reference
SourceSKILL.md
| 157 | - **Access Token:** Open https://developers.facebook.com/tools/explorer/ → select your App → click "Generate Access Token" → select permissions `ads_management`, `ads_read`, `business_management` → cl |
low line 158
External URL reference
SourceSKILL.md
| 158 | - **App ID:** Go to https://developers.facebook.com/apps/ → select your App → App Settings → Basic |
low line 159
External URL reference
SourceSKILL.md
| 159 | - **Ad Account ID:** Go to https://adsmanager.facebook.com/ → find `act_XXXXXXXXX` in the URL or account dropdown |
low line 243
External URL reference
SourceSKILL.md
| 243 | | `lanbow-ads` CLI | Install via `npm i -g lanbow-ads` ([npm registry](https://www.npmjs.com/package/lanbow-ads)) | Campaign management and performance data retrieval via Meta Marketing API | |
low line 289
External URL reference
SourceSKILL.md
| 289 | 7. **Rotate after use** — revoke tokens in [Meta Business Settings](https://business.facebook.com/settings/) after your session ends, especially if you used long-lived tokens or App Secret |
low line 290
External URL reference
SourceSKILL.md
| 290 | 8. **Verify `lanbow-ads` provenance** — install from the [official npm registry](https://www.npmjs.com/package/lanbow-ads) and verify the package before use |
Scanned on May 15, 2026
View Security DashboardGitHub Stars 2.0K
Rate this skill
Categorymarketing
UpdatedMay 20, 2026
openclawapiadvertising-specialistgrowth-marketerseo-specialistcontent-marketerbrand-strategistopenaimarketing
LeoYeAI/openclaw-master-skills