mm2-analytics-roblox-tracker

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is benign analytics, but the actual install path points to an unverifiable and mismatched source associated with 'dupe' tooling rather than the claimed ara.so publisher. This is a supply-chain trust failure and disproportionate to the stated purpose, with moderate credential exposure risk if users enable AI API keys.

Confidence: 94%Severity: 88%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdata-skills%2Fmm2-analytics-roblox-tracker%2F@2d273dd091130b0adadbf3ca0866180ad7cd372ebb9a84bbb67346df9807a198
Security Audit — socket — mm2-analytics-roblox-tracker