op-auto-clicker
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a direct download link for a pre-built executable from an unverified GitHub repository (
https://github.com/jiaoyanming0-bot/OPAutoClicker/releases/latest). The use of a personal/bot account for software distribution rather than an official project or vendor repository increases the risk of supply chain attack. - [COMMAND_EXECUTION]: The instructions explicitly encourage the user to bypass operating system security features, stating: "Grant permissions if Windows Defender flags it" and "Add exception in Windows Defender." Advising users to ignore or disable antivirus warnings is a significant security concern.
- [PRIVILEGE_ESCALATION]: The skill recommends running the downloaded executable with elevated permissions ("Run as Administrator for full functionality") and includes code snippets to check for administrative roles. Running untrusted binaries with high-level access allows for total system compromise.
Recommendations
- AI detected serious security threats
Audit Metadata