mm2-analytics-roblox-tracker

Warn

Audited by Socket on May 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the actual install footprint is not coherent with a trustworthy ara.so skill: it relies on an unrelated, free-hosted, unverifiable source, asks users to run setup.sh, and may pass AI credentials into untrusted code. No confirmed malware is shown, but the supply-chain and credential-forwarding risks are high.

Confidence: 89%Severity: 88%
Audit Metadata
Analyzed At
May 16, 2026, 08:52 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdata-skills%2Fmm2-analytics-roblox-tracker%2F@27e0ef138c3881019db074a3e43a1a4cc080d730
Security Audit — socket — mm2-analytics-roblox-tracker