mm2-analytics-roblox-toolkit

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill contains instructions to clone and set up a repository from a suspicious GitHub pages domain disguised as a Roblox analytics toolkit.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The installation instructions direct the user to clone a repository from a suspicious GitHub Pages domain (8015238355.github.io) associated with a Roblox duping scam.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (critical risk: 1.00). The skill contains instructions to clone a suspicious repository hosting a dupe tool disguised as an analytics toolkit.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning and executing code from an arbitrary user GitHub Pages site (8015238355.github.io), presenting high-risk provenance and an unverifiable runtime external dependency.