optiscaler-client-fsr4-manager
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads a compressed archive containing executable files from a repository hosted on GitHub.
- [REMOTE_CODE_EXECUTION]: Provides instructions to execute the downloaded binary files (OptiscalerClient.exe and OptiscalerClient), which originate from an unverified external source.
- [PRIVILEGE_ESCALATION]: Requests administrative privileges via the runas verb in C# and instructs the user to modify file permissions using chmod +x to enable execution of the downloaded binaries. These permissions are utilized for the skill's primary function of patching game DLLs.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill scans system directories for game installations (Steam, Epic Games) and reads configuration data from games.json and nvngx.ini files.
- Boundary markers: No explicit delimiters or warnings for processing untrusted directory or file metadata are present.
- Capability inventory: The skill performs file system modifications including copying, backing up, and overwriting DLL files, as well as generating INI configuration files.
- Sanitization: There is no evidence of sanitization for game metadata or file paths ingested during the library scanning process.
Recommendations
- AI detected serious security threats
Audit Metadata