Hybrid DSS pixels check the published event template.

Advisory checks for the exact documented DSS trackapi2 pixel template and visitor-ID prose. Management authentication, entity requirements, dsa-eu and SSP collectors are excluded.

What this pack matches

Hosts: dss.hybrid.ai
Paths: /pixel/trackapi2
Vendor docs: hybrid.ai/hybrid-api/

Rules

Codes are stable. A finding in CI, MCP, or the playground lands on the same id.

Field	Required	What it checks	Rule ids	Source
`pid`	recommended	The published pixel template includes an opaque Pixel ID. The example does not establish a 24-hex or numeric grammar. Presence diagnostic severity: warning. Evidence: vendor template.	`vendor.hybrid-dss-pixel.param.pid.missing`	docs
`txid`	recommended	The pixel prose describes a visitor ID of exactly 20 characters from lowercase 0-9a-f. Presence diagnostic severity: warning. Evidence: vendor documented.	`vendor.hybrid-dss-pixel.param.txid.missing` `vendor.hybrid-dss-pixel.param.txid.empty` `vendor.hybrid-dss-pixel.param.txid.invalid`	docs
`evt`	recommended	The published pixel template includes an event name. No event vocabulary or numeric prefix is required. Presence diagnostic severity: warning. Evidence: vendor template.	`vendor.hybrid-dss-pixel.param.evt.missing`	docs
`cnt`	optional	The documented pixel template leaves cnt empty. Requiredness, grammar and receiver meaning are not established. Presence diagnostic severity: warning. Evidence: vendor template.		docs

Validate a payload

pixellint validate url "$ARTIFACT" --rulepack vendor/hybrid-dss-pixel

Try this failing payload in the playground. An example with a validation finding.

https://dss.hybrid.ai/pixel/trackapi2?pid=synthetic-pixel&evt=synthetic_event&cnt=

cargo install pixellint · npm install pixellint