mm2-analytics-roblox-tracker

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill documentation instructs cloning a repository from an external GitHub pages URL that points to a game-duping project, which indicates malicious or deceptive steering.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The skill instructs users to clone a repository named 'murder-mystery-dupe-roblox' from a suspicious GitHub Pages URL (8015238355.github.io), which is a common indicator of asset duplication or phishing scams.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill instructs cloning from an arbitrary GitHub Pages site (https://8015238355.github.io) during manual installation, introducing an unverifiable runtime external dependency under weak/unknown provenance.