That's my worry. An audio only CD is innocuous enough. Something with extra stuff might set off alarm bells and not have them open it at all.
's true. though you need to insert it to see there's extra stuff on. and once you do, the AUTORUN already runs (unless you disabled this default setting--like I would advise anyone to do, IIRC you can find it in that long-ass list of checkboxes in your File Exporer menu Extra > Folder Options, but I could be wrong I'm not in Windows right now to check)
Question is, what do we want that AUTORUN file to do? 
You're the computer guy, you tell me.
I disavow all knowledge of said CD if that is how we go, btw.
Hehehehehe I was (sort of) kidding, of course.
However, there's one fairly innocent thing it can do, such as automatically opening a webpage, in order to measure the success of the outcome.