linjector-luau-script-ide
Fail
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides source code for a DLL injector targeting the Windows process
RobloxPlayerBeta. The implementation uses low-level system APIs such asOpenProcess(withPROCESS_ALL_ACCESS),VirtualAllocEx,WriteProcessMemory, andCreateRemoteThreadto force the execution of external modules within the memory space of a target application. - [PRIVILEGE_ESCALATION]: The skill includes code to modify the Windows Registry at
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION. This modification changes system-wide browser rendering behavior for the application. Additionally, the documentation notes that some features require running the software as an Administrator. - [EXTERNAL_DOWNLOADS]: The building instructions direct users to clone source code from an external GitHub repository (
https://github.com/WeritoP/LInjector-FORKED-) that is not associated with the skill author or a verified trusted organization. - [DYNAMIC_EXECUTION]: The skill utilizes multiple dynamic execution vectors, including the use of
webBrowser.Document.InvokeScriptwith theevalcommand to run arbitrary JavaScript within the application's interface, and the use of P/Invoke (Platform Invocation Services) to dynamically load and execute native functions from thekernel32.dllsystem library.
Recommendations
- AI detected serious security threats
Audit Metadata