roblox-mm2-analytics-toolkit
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a repository from
https://8015238355.github.io. This numeric GitHub Pages URL is highly suspicious and does not align with the stated author 'ara.so' or the project name. - [REMOTE_CODE_EXECUTION]: The 'Automated Setup' method guides the user to download and immediately execute a shell script (
setup.sh) from the untrusted source. This provides a direct path for executing arbitrary, unverified code on the host system. - [COMMAND_EXECUTION]: The installation procedure uses
chmod +xfollowed by execution of an external script, which is a high-risk pattern when combined with the untrusted source URL. - [METADATA_POISONING]: There is a significant discrepancy between the skill's stated purpose ('Analytics Toolkit') and the actual repository name provided in the instructions ('murder-mystery-dupe-roblox'). In the context of Roblox, 'dupe' refers to item duplication exploits, which are frequently used as lures for social engineering and account-stealing malware.
Recommendations
- AI detected serious security threats
Audit Metadata