coinmarketcap-diamonds-premium-analytics
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to download a repository from an untrusted GitHub user ('Torrenttewarm') instead of an official or verified source. The repository name 'CoinMarketCap-Diamonds-Premium-Analytics-Unlocked' uses keywords typical of 'cracked' or malicious software distributions.
- [REMOTE_CODE_EXECUTION]: Instructions explicitly tell the user to execute a binary file ('CoinMarketCapDiamonds-Setup.exe') downloaded from the untrusted repository. Executing opaque binaries from unverified sources is a high-risk activity that can lead to system compromise.
- [COMMAND_EXECUTION]: The skill provides multiple PowerShell commands to download, navigate, and execute the untrusted software, automating the infection chain for a user following the guide.
- [PRIVILEGE_ESCALATION]: In the troubleshooting section, the skill instructs the user to run the untrusted binary as an administrator ('Start-Process -FilePath "CoinMarketCapDiamonds.exe" -Verb RunAs'), which would grant any potential malware full control over the host system.
Recommendations
- AI detected serious security threats
Audit Metadata