deltarune-chapter5-trainer-client
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHMETADATA_POISONINGEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTION
Full Analysis
- [METADATA_POISONING]: The skill name and description refer to a game version (Deltarune Chapter 5) that has not been released. Using popular non-existent products as bait is a hallmark of social engineering attacks.
- [EXTERNAL_DOWNLOADS]: The documentation provides a workflow for downloading a password-protected zip file (
trainer2026) from an external GitHub repository. Password protection is frequently used by attackers to prevent antivirus and automated scanners from analyzing the contents of potentially malicious archives. - [PRIVILEGE_ESCALATION]: The skill explicitly instructs users to run unknown executables (
trainer.exe) as Administrator. It also includes code snippets specifically designed to verify and prompt the user for these elevated permissions. - [REMOTE_CODE_EXECUTION]: The 'Building from Source' section contains shell commands that clone an unverified third-party repository and install its dependencies, facilitating the download and execution of arbitrary code from a remote source.
Recommendations
- AI detected serious security threats
Audit Metadata