mm2-roblox-analytics-toolkit

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated Roblox analytics purpose is plausible, but the actual install path relies on an unverifiable third-party GitHub repo and an executed setup script that cannot be inspected. The skill also forwards OpenAI/Anthropic keys into that unverified codebase, creating disproportionate credential-forwarding risk. This is not confirmed malware, but it is a high-risk skill and should not be trusted without a verifiable official source and code review.

Confidence: 96%Severity: 90%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdata-skills%2Fmm2-roblox-analytics-toolkit%2F@4ba38e86f85bc564b4304434c23a90a6e2d352ff725cfe8690bedad7d0801bf8
Security Audit — socket — mm2-roblox-analytics-toolkit