Privacy Mask

• Analyzed: May 11, 2026, 6:29 AM
• Findings: 1
• Version: 0.3.5
• Hash: b7a3b3f4b70f31b684405e3a2800da03d234e2919a7e58f1fcf788e0c9c1cac0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'privacy-mask' skill is a privacy-focused tool designed to redact PII from images locally using OCR and regex-based detection. It utilizes the 'UserPromptSubmit' hook to intercept and sanitize images in the local cache before they are sent to an LLM API, which aligns with its stated purpose of data loss prevention (DLP). The instructions in SKILL.md explicitly guide the agent to prioritize user privacy and local processing, and there is no evidence of data exfiltration, malicious execution, or harmful prompt injection in the provided files.