Meta Business CLI

Skill for the Meta Business CLI. Complete WhatsApp, Instagram, Facebook Pages, and Messenger automation via the Graph API. Supports messaging, media, templat...

This skill appears to be a straightforward wrapper for a Meta Graph CLI. Before installing or running it: (1) verify the 'meta' CLI binary or the GitHub repo (adolago/meta-cli) is the official/trusted source you expect; avoid running arbitrary git clone/build commands from unknown repos. (2) Understand that credentials (app secret, access tokens) are stored locally at ~/.meta-cli/config.json — protect that file (restrict permissions) and prefer using short-lived tokens or system users where possible. (3) The CLI can send messages and upload local files — review and restrict any tokens you pass (use allowlist features for messaging). (4) If you want stronger assurance, inspect the upstream repository code or prefer an install path from an official release or verified package registry.

Type: OpenClaw Skill Name: meta-business Version: 1.2.0 The skill bundle provides a CLI for Meta Business API automation, including messaging, media, and webhook management. The installation process involves cloning a public GitHub repository and installing a bun package, which are standard methods. While the skill handles sensitive credentials (stored locally) and can install a systemd service for webhooks (a form of persistence), these actions are explicitly documented and align with the stated purpose. There is no evidence of intentional data exfiltration, hidden backdoors, malicious execution, or prompt injection attempts against the OpenClaw agent. The skill even mentions 'Prompt Injection Protection' for its own commands.