amrouter

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The documentation explicitly describes automated account-registration and "key extraction" workflows (Playwright + 2Captcha + temp mail + proxy support), which are strong indicators of functionality intended to acquire provider credentials and bypass anti-abuse controls—this presents a high risk of credential theft and abuse/exfiltration.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The setup script (scripts/setup.sh) performs a runtime git clone of https://github.com/ahwanulm/AMRouter.git and then runs npm install/build/start, so remote code is fetched and executed as a required dependency.