pixel-capi-auditor
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands such as
curlandgrepused for diagnostic purposes, verifying pixel presence on a website or testing API connectivity. These operations are consistent with the tool's intended purpose of verifying tracking installations. - [DATA_EXFILTRATION]: Provides instructions for sending conversion data to third-party ad platforms including Meta, Google, TikTok, LinkedIn, Reddit, and Microsoft. The skill specifies official API endpoints and recommends industry-standard hashing (SHA-256) for PII (Personally Identifiable Information) before transmission.
- [INDIRECT_PROMPT_INJECTION]: The auditing workflow involves analyzing external website source code which constitutes an untrusted data surface.
- Ingestion points: Website source code retrieved via
curland inspected via shell commands (referenced in SKILL.md). - Boundary markers: No explicit delimiters are used to separate untrusted website content from the agent's instructions.
- Capability inventory: The skill facilitates network requests and shell command execution.
- Sanitization: No specific sanitization or filtering logic is described for ingested data.
Audit Metadata