Security audit

Server-Side Conversion Tracking

Security checks across malware telemetry and agentic risk

Overview

This is a documentation-only skill for setting up ad conversion tracking, with sensitive data flows disclosed and aligned to that purpose.

Installers should treat this as privacy-sensitive implementation guidance: only enable server-side tracking where they have appropriate user consent, legal basis, retention controls, and secure handling for ad-platform tokens and customer identifiers. Review the external Autonnel repository and docker-compose.yml before running it in production, and replace any development secrets before public deployment.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The skill instructs capturing referrer, user agent, client IP, and later transmitting hashed customer identifiers such as email and phone to ad platforms. Although it notes that consent and privacy requirements apply later in the document, it does not present a clear upfront warning that the skill affects user privacy and sends user data to third-party advertising systems.

Credential Access

High

Category: Privilege Escalation
Content: | Platform | Endpoint / mechanism | Credentials needed | |---|---|---| | Facebook | Conversions API | Pixel ID + access token | | TikTok | Events API | Pixel code + access token | | Google Ads | Click conversion import (`gclid`-keyed) | Conversion action + developer/OAuth credentials | | Microsoft Bing | Conversions API | UET tag ID + CAPI token |
Confidence: 70% confidence
Finding: access token

Credential Access

High

Category: Privilege Escalation
Content: | Platform | Endpoint / mechanism | Credentials needed | |---|---|---| | Facebook | Conversions API | Pixel ID + access token | | TikTok | Events API | Pixel code + access token | | Google Ads | Click conversion import (`gclid`-keyed) | Conversion action + developer/OAuth credentials | | Microsoft Bing | Conversions API | UET tag ID + CAPI token |
Confidence: 70% confidence
Finding: access token

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.