mm2-roblox-analytics-toolkit
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated Roblox analytics purpose is plausible, but the actual install path relies on an unverifiable third-party GitHub repo and an executed setup script that cannot be inspected. The skill also forwards OpenAI/Anthropic keys into that unverified codebase, creating disproportionate credential-forwarding risk. This is not confirmed malware, but it is a high-risk skill and should not be trusted without a verifiable official source and code review.
Confidence: 96%Severity: 90%
Audit Metadata