Security audit

Wip Ldm Os Private

Security checks across malware telemetry and agentic risk

Overview

LDM OS appears purpose-built for shared AI memory and tooling, but it installs broad persistent agent hooks and credential/profile behavior that users should review before installing.

Review this as infrastructure, not a simple prompt skill. Before installing, check the dry run and be comfortable with persistent Claude hooks, MCP registration, global npm installation, cron/process-monitor behavior, broad local backups, and the shell-profile export of a 1Password service-account token if present. Install only on a machine where you want LDM OS to manage multiple AI harnesses and shared local memory.

SkillSpector

By NVIDIA

SkillSpector could not complete.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.destructive_delete_command, suspicious.env_credential_access (+3 more)

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: bin/ldm.js:224

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: lib/bootstrap.mjs:18

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: lib/deploy.mjs:116

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: lib/state.mjs:92

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: lib/updates.mjs:131

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/test-installer-target-self-update.mjs:22

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/test-ldm-status-concurrency.mjs:59

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/test-ldm-status-timeout.mjs:19

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/bridge/core.ts:153

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: src/bridge/mcp-server.ts:520

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

Code: suspicious.destructive_delete_command
Location: ai/product/bugs/xai-grok/2026-04-10--cc-mini--finish-deprecating-old-xai-grok-repo.md:26

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

Code: suspicious.destructive_delete_command
Location: ai/product/plans-prds/current/2026-03-17--install-everything-enable-disable.md:249

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: bin/ldm.js:32

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/bridge/core.ts:40

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: src/hosted-mcp/server.mjs:42

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: ai/product/plans-prds/codex-remote-control/2026-04-28--cc-mini--codex-remote-control-live-test-runbook.md:155

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: bin/ldm.js:5180

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: src/bridge/core.ts:152

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: src/hosted-mcp/server.mjs:172

Prompt-injection style instruction pattern detected.

Warn

Code: suspicious.prompt_injection_instructions
Location: ai/research/2026-04-03--cc-mini--claude-md-organization-research.md:285