server-side-conversion-tracking

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). These links point to a third‑party GitHub repo and its raw docker‑compose file which the skill instructs users to curl and run (docker compose up), allowing unverified container images or code from that repository to be pulled and executed — a common malware distribution vector.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes a runtime setup step that downloads and runs remote container configuration via "curl -O https://raw.githubusercontent.com/autonnel/autonnel/master/docker-compose.yml" followed by "docker compose up", which fetches and executes remote code from https://raw.githubusercontent.com/autonnel/autonnel/master/docker-compose.yml.