abai-autoplus-chatgpt-account-manager
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation process involves cloning a remote repository and installing packages from public registries (pip and npm) without pinned versions or integrity hashes, which allows for the execution of arbitrary code from external sources during setup.
- [COMMAND_EXECUTION]: The skill requires executing various system-level commands to configure the environment, install browser binaries via Playwright, and launch a web server that binds to all network interfaces (0.0.0.0).
- [EXTERNAL_DOWNLOADS]: Large sets of external dependencies and runtime binaries (such as Chromium) are downloaded from the internet during the installation and build phases.
- [CREDENTIALS_UNSAFE]: The tool is designed to manage and utilize sensitive credentials for email, SMS, proxy, and captcha services. Examples include templates for sensitive API keys and login details which, if stored or handled improperly, could be exposed to unauthorized access.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
Audit Metadata