Security audit
ChatMask
Security checks across malware telemetry and agentic risk
Overview
ChatMask appears to do the advertised screenshot-redaction task, but its setup can automatically change system packages and runs helper code fetched from GitHub.
Install only if you are comfortable with the setup commands. Prefer reviewing or preinstalling `python3-venv` yourself so the skill does not invoke apt-get, verify the pinned GitHub commit and Python requirements, and delete `/tmp/chat_pixelate_in_*` and `/tmp/chat_pixelate_out_*` folders after processing sensitive screenshots.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.