mm2-roblox-analytics-tracker

SUSPICIOUS. The skill’s stated purpose is plausible, but its actual install footprint is not coherent with a legitimate MM2 analytics tool: the core installer comes from an unrelated github.io source, the publisher relationship is unverifiable, and optional API credentials may be handed to unverified code. This is high supply-chain risk rather than confirmed malware from the provided evidence.