Rokt

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Rokt integration that can access and modify Rokt account data through Membrane, so it should be used carefully but does not show hidden or malicious behavior.

Install only if you intend to let an agent work with your Rokt account through Membrane. Prefer read-only discovery first, review the Membrane/Rokt permissions granted, and require explicit confirmation before creating, updating, deleting, or automating changes to campaigns, creatives, account records, reports, or other Rokt resources.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill explicitly documents raw action execution and proxy requests against the remote Rokt API without warning that these operations can create, update, or delete data. In an agent context, that omission increases the risk that the agent will invoke powerful remote operations without adequate user confirmation, change review, or safety gating.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal