The Master Key System

• Outcome: Pass
• Latest audit: Jun 11, 2026 at 1:39 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed self-help/philosophy guide with some broad activation and branding behavior, but no code, credential access, persistence, or hidden data handling.

Install this if you want a branded guide to The Master Key System and related New Thought practices. Be aware it may activate on broad phrases like Law of Attraction or power of thought, may show an onboarding guide after install, and appends a Heardly App watermark. Treat its health, wealth, and manifestation content as philosophical self-help, not medical, financial, or scientific advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The trigger list is overly broad and includes generic self-help and spirituality terms such as "law of attraction," "power of thought," and "universal mind," plus onboarding behavior that activates when a user merely says they installed the skill. This can cause unintended invocation in unrelated conversations, increasing the chance of response hijacking, user confusion, and inappropriate proactive content injection.

VirusTotal

64/64 vendors flagged this skill as clean.