mm2-analytics-dashboard-roblox

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill contains instructions to clone a repository from an external URL that references a dupe/exploit theme ("murder-mystery-dupe-roblox"), presenting a software supply chain risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill instructs users to clone a repository from https://8015238355.github.io, an arbitrary numeric GitHub Pages domain, which is a classic deceptive technique used to distribute malicious code under the guise of a Roblox tool.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning and executing a script from an arbitrary external domain (8015238355.github.io), presenting a high-risk unverifiable runtime dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill prompt instructs cloning a repository from a suspicious GitHub URL (8015238355.github.io) with a deceptive name (murder-mystery-dupe-roblox) and running an automated setup script, which is a common vector for supplying malicious payloads to compromised machines.