masterhttprelayvpn-rust

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends downloading and executing prebuilt binaries for various operating systems from an external GitHub repository (github.com/therealaleph/MasterHttpRelayVPN-RUST/releases) that is not associated with the official vendor or a trusted organization. This poses a significant risk as the binaries are unverified and could contain malicious payloads.\n- [PRIVILEGE_ESCALATION]: The instructions require running the tool with elevated privileges (sudo or Administrator) to install a custom Root Certificate Authority (CA) into the system trust store using the --install-cert flag. This grants the tool the ability to intercept and decrypt HTTPS traffic (MITM), which is a high-risk capability that could be exploited for credential theft or data exposure.\n- [PERSISTENCE]: The documentation provides explicit instructions and a template for creating a systemd service (/etc/systemd/system/mhrv-rs.service). This allows the proxy tool to maintain persistence by starting automatically in the background upon system boot.\n- [COMMAND_EXECUTION]: The skill guides users through the execution of multiple sensitive shell commands for binary installation, certificate modification, and system service management, providing a significant surface for command-based attacks if the tool is malicious.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 14, 2026, 10:36 AM