murder-mystery-2-analytics-toolkit
Fail
Audited by Snyk on Oct 1, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (critical risk: 1.00). The skill instructs cloning a git repository from '8015238355.github.io' named 'murder-mystery-dupe-roblox', which exhibits deceptive phishing or malware-distribution intent disguised as a data analytics toolkit.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The installation guide clones an arbitrary personal GitHub Pages domain (8015238355.github.io) hosting an unofficial, unverified repository (
murder-mystery-dupe-roblox), introducing a high-risk untrusted runtime dependency.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to clone a repository associated with game duping/cheating ("murder-mystery-dupe-roblox") and run setup scripts, which poses security and policy concerns.
Issues (3)
E005
CRITICALSuspicious download URL detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata