Security audit
Golden Master
Security checks across malware telemetry and agentic risk
Overview
Golden Master is a coherent local documentation freshness checker that reads repository files and generates user-directed checksum metadata, with no evidence of hidden or unsafe behavior.
Before installing, be comfortable with the skill reading repository files to compare documentation and producing checksum comments or a manifest when you ask it to establish tracking. It should not need credentials, external network calls, background workers, or automatic file edits for its stated purpose.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.