github.com/montgomeryunpopular607/anywhere-agents · main · scanned 2 h ago · 6 config files

7 agent components in montgomeryunpopular607/anywhere-agents: an installer lure (malware delivery pattern), 2 hidden instructions.

Components70 MCP servers
High blast radius3credentials, shell or unvetted code
Credentials handed to agents0none seen
Not vetted0of 0 local servers, skills and plugins
ComponentWhereVerdictBlast radius
AGENTS.mdInstructions · any agent
AGENTS.md1 hidden instruction
high
  • contains an instruction that try to override the agent: HTML comment carrying imperative instructions to the agent
  • is read by the agent as instructions on every session
CLAUDE.mdInstructions · any agent
CLAUDE.md1 hidden instruction
high
  • contains an instruction that try to override the agent: HTML comment carrying imperative instructions to the agent
  • is read by the agent as instructions on every session
Installer lure (malware delivery pattern)Installer lure · any agent
README.mdmalware pattern
high
  • Archive committed in an agent bundle
  • README links to a committed installer
slash command: ci-mockup-figureInstructions · Claude Code
packages/pypi/anywhere_agents/composer/.claude/commands/ci-mockup-figure.mdclean
low
  • is read by the agent as instructions on every session
slash command: implement-reviewInstructions · Claude Code
packages/pypi/anywhere_agents/composer/.claude/commands/implement-review.mdclean
low
  • is read by the agent as instructions on every session
slash command: my-routerInstructions · Claude Code
packages/pypi/anywhere_agents/composer/.claude/commands/my-router.mdclean
low
  • is read by the agent as instructions on every session
slash command: readme-polishInstructions · Claude Code
packages/pypi/anywhere_agents/composer/.claude/commands/readme-polish.mdclean
low
  • is read by the agent as instructions on every session
What to do about it
  • Do not download or run anything from this repository. Its README sends readers to a committed installer and tells them to click past Windows' own warning; that is how the Agent Lure Stealer campaign (Nov 2026) delivers an infostealer. Real skills and MCP servers install from source, never from a ZIP.
  • Hidden instructions in a file your agent reads every session can redirect it. Open the file at the line shown and remove them.
  • For a whole organization (every repo and laptop, rescanned daily, with removal across machines), see Discovery for teams.
Share: https://killerskills.ai/scan/github/montgomeryunpopular607/anywhere-agentsRescan nowScan another