deltarune-chapter5-trainer-client

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes an explicit archive password ("trainer2026") and describes extraction/installation steps that would require reproducing that password verbatim in commands or instructions, which is direct handling/exposure of a secret.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Suspicious — the GitHub repo (unknown user) claims a trainer for an unreleased game and includes instructions to download a password‑protected archive and run trainer.exe as Administrator (classic malware distribution/red‑flag), while ara.so is an unverified short domain used as the project's publisher rather than a known official vendor.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The build/install instructions explicitly run "git clone https://github.com/AdilMir1433/Deltarune-Chapter5-Trainer-Client.git" and then run the fetched code (python trainer.py), so the GitHub URL is a runtime external dependency that would fetch and execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running an unknown trainer executable "as Administrator" and contains code to check/require elevated privileges while guiding the agent to attach to and write into another process's memory (inject/hook), which encourages bypassing security controls and modifying machine/process state.