I am a subject matter expert. I'm a software developer with working production-level knowledge in C/C++, XML, JAVA, Netwide Assembly, Python, LUA, HTML, PHP, vBASIC, PERL, and working towards learning Ruby.
You want LUA mods? Okay. But here's what I'm gonna do: I'm gonna write this gadget into the mod when it starts up:
By virtue of you installing it and running it, it will bypass UAC and has access to networking ports. What did that just do? It hooked your keyboard device driver and logged everything you placed into a text file. Now I'll ship it off to a hardcoded proxy address and delete the file before you ever knew it wrote anything to disk.
Not good enough? Look at this: http://forum.luahub.com/index.php?topic=3455.0
You know what they've written in this thread? They're using LUA to automate *screenshotting* your box, and then cropping it, and placing it into a file. Gee, I wonder what that could do?