Matias Palma

You can run full, provenance, security, malware, performance, cleanup, compatibility, or architecture audits on FiveM resources. It detects backdoors, RATs, SQL injection, event exploitation, NUI vulnerabilities, dupes, crash/DoS vectors, and npm supply chain attacks across ESX, QBCore, QBox, ox_lib, and ND_Core.

FiveM server owners, Lua developers, and security reviewers who need to verify whether a resource is safe to run. It is especially useful when evaluating leaked, cracked, nulled, or unknown-origin scripts, or when migrating resources between GTA V Legacy and Enhanced builds.

Invoke the skill with a mode argument such as full, provenance, security, malware, performance, cleanup, compatibility, or architecture. It uses Read, Grep, Glob, and limited Bash commands like wc, ls, git diff, git log, and git status to inspect the resource codebase.

Yes, it is released under the MIT license, allowing free use, modification, and distribution. The skill is authored by Dei and currently at version 1.2.2, with no licensing cost for auditing FiveM resources.

You need access to the FiveM/cfx resource source code you want reviewed, since the skill reads files directly using Read, Grep, and Glob. Git-based commands like git diff and git log are used when the resource is under version control.