re-electron-skill

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This repository contains explicit, purposeful tools and step-by-step instructions to unpack, modify, and repack Electron apps to bypass subscription/licensing checks, extract hardcoded secrets/tokens, and evade detection—facilitating unauthorized access, credential theft, and anti-forensics activity.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow ingests JS source text from the unpacked Electron app (e.g., bundle.js and all .js files under app_unpacked/) via local filesystem reads in scripts/quick_scan.py, scripts/analyze_webpack.py, and scripts/map_ipc.py, and this text can be influenced by an outsider by providing/submitting a crafted app package.