mm2-roblox-analytics-tracker

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill contains instructions to clone a repository from an arbitrary external URL associated with game duplication/exploitation tools.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (critical risk: 1.00). The installation instructions direct the user to clone a repository from a suspicious GitHub Pages domain named 'murder-mystery-dupe-roblox', which is indicative of a phishing or malware delivery vector common in Roblox item-duplication scams.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (critical risk: 1.00). The repository cloned from 8015238355.github.io (murder-mystery-dupe-roblox) points to a known deceptive phishing or exploitation pattern targeting game items rather than a legitimate analytics tracker.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The installation instructions use git clone from an arbitrary GitHub Pages domain (8015238355.github.io) that lacks established first-party ownership or trust, introducing a weak runtime external dependency.