linjector-luau-script-ide

Warn

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides functional C# source code that utilizes the Win32 API (via kernel32.dll) to perform DLL injection. Specifically, it uses OpenProcess, VirtualAllocEx, WriteProcessMemory, and CreateRemoteThread to execute code within the memory space of a target process (e.g., 'RobloxPlayerBeta'). While this is the stated purpose of a script executor, these techniques are high-risk as they bypass standard process boundaries.
  • [EXTERNAL_DOWNLOADS]: The build instructions require cloning a repository from an unverified GitHub user account (WeritoP/LInjector-FORKED-). Downloading and compiling code from untrusted third-party sources presents a significant supply chain risk.
  • [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to clone repositories and build the solution using msbuild. Additionally, the provided C# code programmatically modifies the Windows Registry (HKEY_CURRENT_USER\...\FEATURE_BROWSER_EMULATION) to force IE11 emulation for the embedded Monaco editor.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 06:17 AM
Security Audit — agent-trust-hub — linjector-luau-script-ide