forzadesigner6-vinyl-converter

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Suspicious — the listed resources include a GitHub repository (and its Releases) from a relatively unknown account offering a direct Windows executable (FD6.exe) that performs memory injection (high-risk behavior) and even notes SmartScreen warnings, which are strong indicators for a potentially unsafe/malicious distribution (while the YouTube link and referenced established libraries are low risk, the pre-built .exe from an individual repo raises concern).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The README instructs users to git clone and run the project (e.g., "git clone https://github.com/tokyubevoxelverse/ForzaDesigner6.git" then "python -m fd6"), which fetches remote code from that URL and executes it as part of installation/runtime, so the repository URL is a runtime external dependency that runs remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs locating game processes and performing memory injection, RTTI scanning and memory dumps to overwrite in-game data—actions that modify a running process's memory and thus the machine's runtime state and security posture.