mhr-cfw-domain-fronting-relay
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone the relay software from a repository on a personal GitHub account (github.com/denuitt1/mhr-cfw.git) that is not recognized as a trusted source.
- [EXTERNAL_DOWNLOADS]: The installation guide recommends using an external PyPI mirror (mirror-pypi.runflare.com) which resides outside of standard, trusted package registries.
- [COMMAND_EXECUTION]: The instructions include a verification step that pipes network data from a remote URL directly to the python3 binary.
- [REMOTE_CODE_EXECUTION]: The command 'curl ... | python3 -m json.tool' uses a pipe-to-interpreter pattern. While the specific usage for JSON formatting is currently benign, this establishes a sensitive execution path where malicious data from a compromised target or proxy could potentially be executed if the command is modified.
Recommendations
- HIGH: Downloads and executes remote code from: http://127.0.0.1:8085 - DO NOT USE without thorough review
Audit Metadata