murder-mystery-2-analytics-toolkit
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated Roblox analytics purpose is plausible, but its actual install footprint is not. The publisher identity, repo/source URL, and project naming are inconsistent, and the skill forwards AI API keys into externally installed code from an unverifiable source. This is a high supply-chain and credential-forwarding risk, not a coherent same-publisher toolkit.
Confidence: 95%Severity: 88%
Audit Metadata