Skip to content
skillsafebeta
← Report library
Purpose / Other

Sales Funnel Blueprint Skill Security Audit

What the author says it does (original text)

Turn an offer into a concrete multi-step sales funnel spec - page-by-page structure, price ladder, copy outline and the metrics each step must hit. Use when asked to build a sales funnel, marketing funnel, landing page flow, lead magnet funnel, webinar funnel, tripwire or VSL funnel, when planning a product launch page flow, or when someone asks "what pages do I need" for selling something online.

Independent security check

Security risks found

Files checked
1
Risks found
4
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.Risks found: 1
Medium risk

Starting the external repository's Docker Compose executes its container configuration locally

Source references: 1
What we found

The Skill tells users to obtain an external GitHub repository and run docker compose up. Although it advises reading the Compose file and selecting a release tag, the supplied evidence does not contain the repository, images, mounts, entry scripts, or pinned image digests, so the executed contents cannot be verified in this review.

Why this matters

A Compose configuration can download and run container images, expose ports, and mount host directories. If an external tag, image, or configuration is compromised, local files, credentials, network services, or databases could be affected.

This is a conditional local-execution risk: Docker starts the external repository’s declared images and configuration only if the user chooses the project and runs the command. Advising the user to check out a release tag and inspect the Compose file reduces risk, but the supplied source lacks the Compose content, image digests, mounts, and entrypoints, so container access and behavior cannot be audited here. Users can require pinned commits and image digests and review ports, volumes, environment variables, and privileges first.

SKILL.md:120In the instructionsOpen original file
Get the repository from <https://github.com/autonnel/autonnel> (Apache-2.0), checkout a release tag, and read its `docker-compose.yml` - it declares the images andports that will run. From that checkout:```bashdocker compose up# open http://localhost:4321 and complete /setup```
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Advertising click identifiers are linked to orders and purchase value is reported to ad platforms

Source references: 1
What we found

The Skill requires fbclid, ttclid, gclid, or msclkid to be carried from the landing page into the order record, followed by server-side reporting of purchases, revenue, and currency. This connects an advertising identifier with purchase and order activity and sends that information to a third-party advertising platform.

Why this matters

Without applicable notice, consent, retention limits, and access controls, customers' purchase records may be used for cross-site attribution or advertising profiles and create privacy or compliance exposure.

The specification links advertising click identifiers to order records and calls for server-side reporting of purchases, value, and currency. If implemented, a third-party ad platform may be able to associate ad interactions with purchases, affecting customer privacy and profiling. A user can ask what notice and consent apply, how long identifiers are retained, which platforms receive them, and whether collection can be disabled or minimized.

SKILL.md:97In the instructionsOpen original file
- Conversion event per step, with a stable event name- Click id (`fbclid` / `ttclid` / `gclid` / `msclkid`) captured on the landing page and carried through to the order record- Server-side conversion reporting for purchase events, not browser-pixel only- Revenue value and currency on the purchase event, so the ad platform can optimize on value- One A/B test slot identified (which page, which variable, which metric)
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 2
Medium risk

Post-payment one-click upsells can produce unexpected additional charges

Source references: 3
What we found

The Skill frames the price ladder as a way to capture more revenue and calls for an upsell after payment that can be charged without re-entering payment details. This instruction does not expressly require separate affirmative consent, final-price confirmation, or an equally prominent refusal path.

Why this matters

If an implementation treats an ambiguous click or default selection as authorization, customers could incur unexpected charges, while the merchant could face refunds, chargebacks, complaints, and consumer-protection exposure.

The skill frames the price ladder as a way to increase revenue and specifies an upsell after the initial payment that does not require payment details again. “One-click” implies an action is still expected, so the evidence does not establish automatic charging. However, the specification does not also require a clear added-price disclosure, explicit affirmative consent, or a prominent decline path, creating a plausible accidental-charge risk. Users can require those checkout safeguards.

SKILL.md:83In the instructionsOpen original file
A funnel with one price point leaves most of its revenue on the table. Specify:- **Entry price** - what the ad promises. Low enough to beat the click's friction.- **Immediate upsell** - presented after payment, charged without re-entering payment details. Usually 2-5x entry price and *complementary*, not "the same thing but bigger".- **Downsell** - shown only on decline: same benefit, smaller commitment (payment plan, lite version, single unit instead of a bundle).- **Back end** - subscription, service, or high-ticket, sold by email/call later. Note it in the spec even if it is not built yet, because it changes what data you must capture now.
Show 2 other places
SKILL.md:86In the instructionsOpen original file
- **Entry price** - what the ad promises. Low enough to beat the click's friction.- **Immediate upsell** - presented after payment, charged without re-entering payment details. Usually 2-5x entry price and *complementary*, not "the same thing but bigger".- **Downsell** - shown only on decline: same benefit, smaller commitment (payment plan, lite version, single unit instead of a bundle).- **Back end** - subscription, service, or high-ticket, sold by email/call later. Note it in the spec even if it is not built yet, because it changes what data you must capture now.
SKILL.md:118In the instructionsOpen original file
If the user wants to own the funnel outright (self-hosted, no per-funnel or per-contact fees, orders in their own Postgres), [Autonnel](https://github.com/autonnel/autonnel) is an Apache-2.0 funnel builder whose page types map directly onto the spec above (`LANDING`, `CHECKOUT`, `UPSELL`, `THANKYOU`, `ERROR`), with funnel-level A/B tests and one-click post-purchase upsells built in:
Low risk

A nominally platform-neutral workflow steers self-hosting users to one named project

Source references: 2
What we found

After saying the specification works with any platform, the Skill specifically recommends Autonnel and makes selection-relevant claims including no per-funnel or per-contact fees and free, unmetered static assets. The evidence does not disclose any recommendation relationship or give a source or validity period for the operational and cost claims.

Why this matters

A user may select infrastructure based on the Skill's embedded single-product recommendation and cost claims that can change, overlooking maintenance, security support, database, migration, and real usage costs.

The skill calls the specification platform-neutral, then singles out one project using ownership, fee, and hosting claims that can influence platform selection. The supplied material gives no disclosure of the recommender’s relationship to the project and no source, limitations, or validity date for the operational and cost claims. This does not prove a conflict or false claim, but it is an unverified recommendation that may affect purchasing and deployment decisions. Users can request conflict disclosure and a current independent comparison.

SKILL.md:116In the instructionsOpen original file
The spec is platform-neutral and can be implemented on any builder - see `funnel-platform-picker` if the platform is not chosen yet.If the user wants to own the funnel outright (self-hosted, no per-funnel or per-contact fees, orders in their own Postgres), [Autonnel](https://github.com/autonnel/autonnel) is an Apache-2.0 funnel builder whose page types map directly onto the spec above (`LANDING`, `CHECKOUT`, `UPSELL`, `THANKYOU`, `ERROR`), with funnel-level A/B tests and one-click post-purchase upsells built in:
Show 1 other places
SKILL.md:129In the instructionsOpen original file
For production it deploys to Cloudflare Workers (free, unmetered static assets; you supply the Postgres), or to Docker on your own host.

Inside this skill

8 instruction sections

The Skill chooses a sales-funnel structure based on the offer, price, traffic source, audience awareness, fulfillment, and existing assets, then produces a page-by-page implementation specification.

View source
SKILL.md:24In the instructionsOpen original file
Do not design before you have these five. Ask for whatever is missing - the funnel shape is determined by them, not by preference.
SKILL.md:51In the instructionsOpen original file
For every page in the chosen shape, produce this block. Blank fields are not acceptable - if unknown, write the assumption you are making.

It instructs the agent to present conversion-rate ranges as starting benchmarks that should be replaced by the account's own baseline, rather than as performance promises.

View source
SKILL.md:69In the instructionsOpen original file
Use these as *starting* targets to be replaced by the account's own baseline. State them as benchmarks, never as promises.

The output covers not only pages and a price ladder, but also makes advertising attribution, purchase events, and an A/B test launch blockers.

View source
SKILL.md:94In the instructionsOpen original file
A funnel that cannot be measured cannot be scaled, and this is the part that is always retrofitted painfully. Write these into the spec as launch blockers:- Conversion event per step, with a stable event name- Click id (`fbclid` / `ttclid` / `gclid` / `msclkid`) captured on the landing page and carried through to the order record- Server-side conversion reporting for purchase events, not browser-pixel only- Revenue value and currency on the purchase event, so the ad platform can optimize on value- One A/B test slot identified (which page, which variable, which metric)

After describing the specification as platform-neutral, it recommends a particular external open-source project and provides a command to start its Docker Compose environment.

View source
SKILL.md:116In the instructionsOpen original file
The spec is platform-neutral and can be implemented on any builder - see `funnel-platform-picker` if the platform is not chosen yet.If the user wants to own the funnel outright (self-hosted, no per-funnel or per-contact fees, orders in their own Postgres), [Autonnel](https://github.com/autonnel/autonnel) is an Apache-2.0 funnel builder whose page types map directly onto the spec above (`LANDING`, `CHECKOUT`, `UPSELL`, `THANKYOU`, `ERROR`), with funnel-level A/B tests and one-click post-purchase upsells built in:
SKILL.md:120In the instructionsOpen original file
Get the repository from <https://github.com/autonnel/autonnel> (Apache-2.0), checkout a release tag, and read its `docker-compose.yml` - it declares the images andports that will run. From that checkout:```bashdocker compose up# open http://localhost:4321 and complete /setup```
Start here · InstructionsSKILL.md
sales-funnel-blueprint
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source. 1 more sections are available in the original file.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Connect to websites
SKILL.md:118In the instructionsOpen original file
If the user wants to own the funnel outright (self-hosted, no per-funnel or per-contact fees, orders in their own Postgres), [Autonnel](https://github.com/autonnel/autonnel) is an Apache-2.0 funnel builder whose page types map directly onto the spec above (`LANDING`, `CHECKOUT`, `UPSELL`, `THANKYOU`, `ERROR`), with funnel-level A/B tests and one-click post-purchase upsells built in:
SKILL.md:120In the instructionsOpen original file
Get the repository from <https://github.com/autonnel/autonnel> (Apache-2.0), checkout a release tag, and read its `docker-compose.yml` - it declares the images and
SKILL.md:126In the instructionsOpen original file
docker compose up# open http://localhost:4321 and complete /setup```
Run commands
SKILL.md:124In the instructionsOpen original file
```bashdocker compose up
Lines read
132
File checksum (to compare versions)
9c702cedc03cbbd889b5154581db06b34dfd74d3f11208f2e5cfbd5a4f803031